Supply-chain incident feed

What we've been watching.

Recent supply-chain compromises across npm, PyPI, RubyGems, crates.io, Go modules, Packagist, NuGet, Open VSX, Docker Hub, and GitHub Actions. Curated from public vendor advisories. We list every version we can verify so the scanner picks them up directly: 3,609 package–version pairs across 152 incidents and counting.

Scan your lockfile Submit an incident ↗

High18 Aug 2026
11 packages tracked
GitHub Advisory malware sweep - 2026-08-17 / 2026-08-18 batch (Sui blockchain `@mysten/*` typosquat days 4-5 continuation `sui-move-graphql`+`sui-move-rpc`+`sui-gql-core`+`bcs-core`+`bucket-protocol-sdk-v2`, Tinkoff BNPL dep-confusion tail `bnpl-blocks-independent-bnpl-search`, LEB128 encoding typosquat pair `leb128x`+`ulebkit`, generic CWE-506 boilerplate `blastradar`+`runtime-health`, PyPI `socks5901` Android `/sdcard/` Telegram-bot exfiltrator)
11 GHSA CWE-506 advisories across npm + PyPI in the 24h ending 2026-08-18 06:00 UTC. Headline: five-package Sui blockchain typosquat continuation (sui-move-graphql, sui-move-rpc, sui-gql-core, bcs-core, bucket-protocol-sdk-v2) extends the sui-gql-client/sui-bcs-codec (08-11) and sui-gql/bcs-compact (08-12) @mysten/* typosquat register into day-4/5. Also: bnpl-blocks-independent-bnpl-search (Tinkoff dep-confusion tail), leb128x+ulebkit LEB128 typosquat pair, blastradar+runtime-health generic boilerplate, and PyPI socks5901 Android-target Telegram-bot exfiltrator.
npmPyPI
Affected packages11 packages · 13 versions
npmbcs-core
1.0.0
npmblastradar
1.0.0
npmbnpl-blocks-independent-bnpl-search
1.0.0
npmbucket-protocol-sdk-v2
1.0.0
npmleb128x
1.0.0
npmruntime-health
1.0.11.0.21.0.4
PyPIsocks5901
1.0.0
npmsui-gql-core
1.0.0
npmsui-move-graphql
1.0.0
npmsui-move-rpc
1.0.0
npmulebkit
1.0.0
multi-2026-08-18-ghsa-malware-sweepSource advisory
Medium17 Aug 2026
2 packages tracked
GitHub Advisory quiet-tail sweep - 2026-08-16 / 2026-08-17 (`@ai-vertical/ai-agent` npm generic-malware + `kb-ai` PyPI OpenSSF `setup.py`-install pentest dep-confusion demo)
Two-day quiet-tail after 08-15's 22-package burst: only two new GHSA advisories. @ai-vertical/ai-agent@1.0.0,1.0.1 (npm, GHSA-3248-8gvm-g9jv) has the generic malware boilerplate and no IOC. kb-ai@0.1.0,0.1.1 (PyPI, GHSA-34mp-hr4q-qvh5) is an OpenSSF PROBABLY_PENTEST demo overriding setup.py install to exfil IP + username.
npmPyPI
Affected packages2 packages · 4 versions
npm@ai-vertical/ai-agent
1.0.01.0.1
PyPIkb-ai
0.1.00.1.1
multi-2026-08-17-ghsa-quiet-tailSource advisory
High15 Aug 2026
22 packages tracked
GitHub Advisory npm CWE-506 sweep - 2026-08-15 batch (`@velliajs/discord` `discord.js` impersonator with hardcoded GitHub PAT + hidden `_verifyAuthorization` kill-switch, `akamai(js)-sensor` Google-Calendar invisible-Unicode C2 trio, HackerOne/Twilio `*-probe`/`*-poc` bug-bounty-canary droppers with live payloads, `depcruise-*` + `gunzip-js` `99.9.1` dependency-confusion canary, `@wololasod/tiny-id` RC4 Windows/Linux dropper, `@finaxis/common-js` Xelis miner, `*-vim` naming-canary pair, plus IP/webhook exfiltrators)
22 npm CWE-506 advisories published 2026-08-15 - the day's headline is @velliajs/discord@1.0.3..1.0.7, a discord.js impersonator with two live hardcoded GitHub PATs, an unpinned private-repo sysframe dependency the operator can hot-swap, and a hidden Client.login() _verifyAuthorization allowlist kill-switch. Same-day clusters include a 3-package akamai(js)-sensor Google-Calendar-dead-drop trio using invisible-Unicode payloads, HackerOne/Twilio *-probe/*-poc bug-bounty-canary droppers with real credential exfil, a depcruise-* + gunzip-js 99.9.1 OpenSSF-domain-flagged canary group, @wololasod/tiny-id RC4 dropper, @finaxis/common-js Xelis miner, adxaa WordPress account-takeover, and a matching *-vim naming-canary pair.
npm
Affected packages22 packages · 57 versions
npm@finaxis/common-js
0.3.00.3.10.3.20.3.30.3.4
npm@openrepl/shared
0.0.40.0.5
npm@velliajs/discord
1.0.31.0.41.0.51.0.61.0.7
npm@wololasod/tiny-id
0.1.00.1.10.1.20.1.3
npmadxaa
1.0.0
npmakamai-sensor
1.0.0
npmakamaijs-sensor
2.0.03.0.0
npmakamaijs-sensorv1
3.0.0
npmautbank-core
99.0.099.0.2
npmdepcruise-baseline
99.9.1
npmdepcruise-fmt
99.9.1
npmdepcruise-wrap-stream-in-html
99.9.1
npmfastly-vcl-language-client
1.0.0
npmgunzip-js
99.9.1
npmharmony-app-toolkit
21.0.022.0.0
npmhunterone-build-probe-9210
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.7
npmkit-hydration-vim
1.0.0
npmrequire-i18next
20.0.021.0.0
npmsvelte-goal-vim
1.0.0
npmtw-pkgprobe-7731
1.0.01.0.11.0.31.0.41.0.51.0.61.0.71.1.01.1.1
npmtwilio-hackerone-poc-afe6937c
1.0.01.0.11.0.21.0.31.0.4
npmupload-to-gcp
3.2.1
npm-2026-08-15-ghsa-malware-sweepSource advisory
High14 Aug 2026
26 packages tracked
GitHub Advisory npm CWE-506 sweep - 2026-08-14 batch (~27 packages: `jchunt.top` telemetry-canary day-2 `xrblocks-mcp`, `preinstall-hook-webhook-callback-demo` webhook.site demo, `@secauditb20y/sec-test-r3b` self-labeled sec-test POC, `webautomation_js` + `@ferudionz/*` obfuscator.io RC4 runtime exfil trio, `@guangnao/agent-proxy` Claude/Codex credential monetizer to `hub.client-llm.com`, `@lodash-js/lodash-js` Xelis miner, `@divineubg/divine` ntfy.sh EventSource C2, `@demopack/www` iOS iframe exploit injector, `@ghost_debugger/nanocache` hidden Windows binary launcher, `datefmt-simple-utils` reverse shell to `8.135.48.40:4444`, `registrynpmjs.to` typosquat cluster (`@polymarkets/clob-client-v2`, `@devmikets/hyperliquid-sdk`), Brazilian `alelo-*` dep-confusion cluster to `209.99.185.109`, plus `@peptideventure/*`, `@mexc/shared-utils`, `sui-gql-lite`, `bcs-mini`)
~27 npm CWE-506 advisories published 2026-08-14 (initial 4 clusters backfilled 08-15 with 8 more). Headliners: @guangnao/agent-proxy Claude/Codex credential monetiser to hub.client-llm.com, @lodash-js/lodash-js Xelis miner, @divineubg/divine ntfy.sh EventSource C2, registrynpmjs.to typosquat pair (@polymarkets/clob-client-v2, @devmikets/hyperliquid-sdk), Brazilian alelo-* dep-confusion cluster to 209.99.185.109, datefmt-simple-utils reverse shell to 8.135.48.40:4444, @ghost_debugger/nanocache Windows binary launcher.
npm
Affected packages26 packages · 42 versions
npm@demopack/www
0.0.12
npm@devmikets/hyperliquid-sdk
1.9.6
npm@divineubg/divine
1.0.01.0.11.0.21.0.31.0.41.0.5
npm@ferudionz/web_logger_js
1.0.0
npm@ferudionz/webautomation
1.0.0
npm@ghost_debugger/nanocache
0.1.1
npm@guangnao/agent-proxy
1.2.11.4.01.4.2
npm@lodash-js/lodash-js
0.1.00.2.00.3.0
npm@mexc/shared-utils
1.0.0
npm@peptideventure/peptide-score-modifier
1.0.0
npm@peptideventure/peptide-unit
1.0.0
npm@polymarkets/clob-client-v2
1.0.6
npm@secauditb20y/sec-test-r3b
1.0.0
npmalelo-client
99.0.099.0.2
npmalelo-common
99.0.0
npmalelo-core
99.0.099.0.199.0.2
npmalelo-payment
99.0.099.0.2
npmalelo-services
99.0.099.0.2
npmalelo-utils
99.0.0
npmbcs-mini
1.0.0
npmdatefmt-simple-utils
1.0.0
npmmeualelo
99.0.0
npmpreinstall-hook-webhook-callback-demo
1.0.01.0.1
npmsui-gql-lite
1.0.0
npmwebautomation_js
1.0.01.0.1
npmxrblocks-mcp
6.3.1
npm-2026-08-14-ghsa-malware-sweepSource advisory
Critical13 Aug 2026
46 packages tracked
GitHub Advisory npm CWE-506 sweep - 2026-08-13 batch (`ltidisafe` GCS dep-confusion dropper ring `check-audit`+`cspell-esm`+`eslint-publish-release`+`in-install`+`knip-bun`+`resolve-audit`+`napi-raw`, `31.97.137.157:45000` bare-IP Chromium-DPAPI stealer kit `vexium-kit`+`ventra-kit`+`velora-kit`+`vortex-kit`+`copytrade-core`+`prediction-trader`, `@hzero-front-ui/*` internal-scope dep-confusion 5-package cluster with `callback.m0chan.co.uk` DNS+HTTPS beacon, `@khaznatech/*` webhook.site preinstall exfil 3-pack, `jchunt.top` telemetry-canary series `wct-st`+`tizen-webdriver-cli`, `8.135.48.40:4444` reverse-shell date-fmt masquerade pair `datefmt-util-helper`+`date-fmt-helper-xz`, `notafollower` AWS IMDSv2 credential theft, `bs58-15` base58 typosquat via `base65-15x` transitive, `@solana-js/web3` Windows PowerShell + `files.catbox.moe` RCE, `postcss-initialize-plugin` Ethereum-RPC-C2 continuation, `mutex-forge` Telegram+Slack+Ethereum-Sepolia RAT, `chai-as-reformed`+`process-live-log`+`external-process-live-log`+`minimalistic-assert-plus` Function-constructor R-shell family, `node-config-svg-contract` eval-from-URL, `nc-verify-127942`+`@jacksher/install-exec-poc` OAST recon POCs, `cilm-ui-commons` pipedream.net preinstall, ~10 boilerplate CWE-506)
~50 npm CWE-506 advisories published 2026-08-13. Headline: ltidisafe GCS dep-confusion dropper ring (7+ hollow-shell packages at v99.9.1 pinning ltidisafe as an https://ltidi.storage.googleapis.com/depenconf/ tarball to bypass npm registry review); 31.97.137.157:45000 bare-IP Chromium-DPAPI stealer kit family (vexium-kit, ventra-kit, velora-kit, vortex-kit, copytrade-core, prediction-trader - all fetch /icons/108|116 and eval() a credits field with @primno/dpapi+better-sqlite3+node-machine-id bundled for browser-cred theft); and a *`@hzero-front-ui/ 5-package internal-scope dep-confusion cluster** beaconing to callback.m0chan.co.uk`.
npm
Affected packages46 packages · 87 versions
npm@hzero-front-ui/c7n-ui
99.99.99
npm@hzero-front-ui/cfg
99.99.99
npm@hzero-front-ui/core
99.99.99
npm@hzero-front-ui/hzero-ui
99.99.99
npm@hzero-front-ui/themes
99.99.99
npm@jacksher/install-exec-poc
1.0.01.0.2
npm@khaznatech/common
99.0.0
npm@khaznatech/core
99.0.0
npm@khaznatech/utils
99.0.0
npm@leonardo0902/vortex-kit
12.0.2
npm@solana-js/web3
1.91.3
npmai-analyzer
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.131.0.141.0.151.0.161.0.171.0.181.0.19
npmbs58-15
6.0.06.0.1
npmchai-as-reformed
1.2.0
npmcheck-audit
99.9.1
npmcilm-ui-commons
1.1.0
npmcopytrade-core
2.3.0
npmcspell-esm
99.9.1
npmdate-fmt-helper-xz
1.0.01.0.11.0.21.0.31.0.4
npmdatefmt-util-helper
1.0.01.0.1
npmdebug-proxy-chrome-devtools
1.0.11.0.2
npmeslint-generate-prerelease
99.9.1
npmeslint-generate-release
99.9.1
npmeslint-publish-release
99.9.1
npmexternal-process-live-log
13.5.2
npmin-install
99.9.1
npmknip-bun
99.9.1
npmminimalistic-assert-plus
1.1.7
npmmutex-forge
2.0.12.0.2
npmnapi-raw
99.9.1
npmnc-verify-127942
1.0.0
npmnode-config-svg-contract
1.0.0
npmnotafollower
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.11
npmpath-match-js
1.0.0
npmpostcss-initialize-plugin
3.0.4
npmprediction-trader
2.3.0
npmprocess-live-log
11.5.2
npmreact-shield
1.0.0
npmresolve-audit
99.9.1
npmroot-locator
1.0.0
npmsource-analyzer
1.0.0
npmtizen-webdriver-cli
1.0.0
npmvelora-kit
12.0.212.1.2
npmventra-kit
1.0.2
npmvexium-kit
2.0.210.0.2
npmwct-st
1.0.0
npm-2026-08-13-ghsa-malware-sweepSource advisory
Critical12 Aug 2026
159 packages tracked
GitHub Advisory npm CWE-506 sweep - 2026-08-12 batch (Web3 typosquat webhook.site ring day-2 `permit2`+`camelot-ammv2-*`+`boring-vault`+`augustdigital-sdk`+`upshift-*`, Ethereum-RPC-C2 `envpack-conf`+`tailwind-form-templates` XOR-encrypted second-stage on blockchain, `svelte-kit-vim`+`kit-map-vim` map-streak-kit day-4 continuation, `sui-gql`+`bcs-compact` Sui `@mysten/*` typosquat continuation, ~50-package `@years17/18/19/20/*` n8n-nodes-utils-helper red-team SSH-backdoor mass drop, `internallib_v756`/`v392` bare `/dev/tcp/10.0.74.63/4444` reverse shell, `mcp-util-helpers` webhook.site R-shell channel, `passkeys-react` Burp Collaborator OAST recon, `bb-twl-k7x2` Twilio-internal dep-confusion, `@telekom-ods/react-ui-kit` Deutsche Telekom internal-scope, `verify-cli`+`@assetshop/verify-cli` OAST recon pair, `dakumangalsingh` Java-Robot RAT with jpackage wrapper, boilerplate CWE-506 mass npm flood ~100 packages)
~160 npm CWE-506 advisories published 2026-08-12. Headline: Web3 typosquat webhook.site ring day-2 (permit2, camelot-ammv2-core/periphery, boring-vault, augustdigital-sdk, upshift-finance/config) with identical env/wallet-keystore exfil TTP as the 08-11 OpenZeppelin/Aerodrome ring; Ethereum-RPC-C2 pair (envpack-conf, tailwind-form-templates) fetching XOR-encrypted second-stage from blockchain via wallet 0xa322E5f3D311D3080e6f0121063e9aDC2490Ef1a; and a *~50-package `@years17/18/19/20/` red-team n8n mass drop** installing pwn@kali SSH backdoors.
npm
Affected packages159 packages · 184 versions
npm@assetshop/verify-cli
99.0.099.0.1
npm@bikli/bikli
1.0.0
npm@bikli/cli
1.0.0
npm@noxzacode/eslint-config
1.0.0
npm@noxzacode/libsignal-node
1.0.0
npm@telekom-ods/react-ui-kit
2.6.02.6.9
npm@years17/n8n-nodes-helper-utils
1.0.01.0.11.0.21.0.31.0.41.0.51.0.6
npm@years17/n8n-nodes-utils-helper
1.0.0
npm@years17/n8n-nodes-utils-helper-b
1.0.0
npm@years17/n8n-nodes-utils-helper-c
1.0.0
npm@years17/n8n-nodes-utils-helper-d
1.0.0
npm@years17/n8n-nodes-utils-helper-e
1.0.0
npm@years17/n8n-nodes-utils-helper-f
1.0.0
npm@years17/n8n-nodes-utils-helper-g
1.0.0
npm@years17/n8n-nodes-utils-helper-h
1.0.0
npm@years17/n8n-nodes-utils-helper-i
1.0.0
npm@years18/n8n-nodes-utils-helper-a
1.0.0
npm@years18/n8n-nodes-utils-helper-b
1.0.0
npm@years18/n8n-nodes-utils-helper-c
1.0.0
npm@years18/n8n-nodes-utils-helper-d
1.0.0
npm@years18/n8n-nodes-utils-helper-e
1.0.0
npm@years18/n8n-nodes-utils-helper-f
1.0.0
npm@years18/n8n-nodes-utils-helper-g
1.0.0
npm@years18/n8n-nodes-utils-helper-j
1.0.0
npm@years18/n8n-nodes-utils-helper-k
1.0.0
npm@years18/n8n-nodes-utils-helper-l
1.0.0
npm@years18/n8n-nodes-utils-helper-m
1.0.0
npm@years18/n8n-nodes-utils-helper-n
1.0.0
npm@years18/n8n-nodes-utils-helper-o
1.0.0
npm@years18/n8n-nodes-utils-helper-p
1.0.0
npm@years18/n8n-nodes-utils-helper-q
1.0.0
npm@years18/n8n-nodes-utils-helper-r
1.0.0
npm@years18/n8n-nodes-utils-helper-s
1.0.0
npm@years18/n8n-nodes-utils-helper-t
1.0.0
npm@years18/n8n-nodes-utils-helper-u
1.0.0
npm@years18/n8n-nodes-utils-helper-v
1.0.0
npm@years18/n8n-nodes-utils-helper-w
1.0.0
npm@years18/n8n-nodes-utils-helper-x
1.0.0
npm@years18/n8n-nodes-utils-helper-y
1.0.0
npm@years19/n8n-nodes-utils-helper-a
1.0.0
npm@years19/n8n-nodes-utils-helper-b
1.0.0
npm@years19/n8n-nodes-utils-helper-c
1.0.0
npm@years19/n8n-nodes-utils-helper-d
1.0.0
npm@years19/n8n-nodes-utils-helper-e
1.0.0
npm@years19/n8n-nodes-utils-helper-f
1.0.0
npm@years19/n8n-nodes-utils-helper-g
1.0.0
npm@years19/n8n-nodes-utils-helper-h
1.0.0
npm@years19/n8n-nodes-utils-helper-i
1.0.0
npm@years19/n8n-nodes-utils-helper-j
1.0.0
npm@years19/n8n-nodes-utils-helper-k
1.0.0
npm@years19/n8n-nodes-utils-helper-l
1.0.0
npm@years19/n8n-nodes-utils-helper-m
1.0.0
npm@years19/n8n-nodes-utils-helper-n
1.0.0
npm@years19/n8n-nodes-utils-helper-o
1.0.0
npm@years19/n8n-nodes-utils-helper-p
1.0.0
npm@years19/n8n-nodes-utils-helper-q
1.0.0
npm@years19/n8n-nodes-utils-helper-r
1.0.0
npm@years19/n8n-nodes-utils-helper-s
1.0.0
npm@years19/n8n-nodes-utils-helper-t
1.0.0
npm@years19/n8n-nodes-utils-helper-u
1.0.0
npm@years19/n8n-nodes-utils-helper-v
1.0.0
npm@years19/n8n-nodes-utils-helper-w
1.0.0
npm@years19/n8n-nodes-utils-helper-x
1.0.0
npm@years19/n8n-nodes-utils-helper-y
1.0.0
npm@years20/n8n-nodes-utils-helper-a
1.0.0
npm@years20/n8n-nodes-utils-helper-b
1.0.0
npm@years20/n8n-nodes-utils-helper-c
1.0.0
npm@years20/n8n-nodes-utils-helper-d
1.0.0
npm@years20/n8n-nodes-utils-helper-e
1.0.0
npm@years20/n8n-nodes-utils-helper-f
1.0.0
npm@years20/n8n-nodes-utils-helper-g
1.0.0
npm@years20/n8n-nodes-utils-helper-h
1.0.0
npm@years20/n8n-nodes-utils-helper-i
1.0.0
npm@years20/n8n-nodes-utils-helper-j
1.0.0
npmairdzticket
1.0.0
npmaugustdigital-sdk
8.20.1
npmbb-twl-k7x2
1.0.01.0.1
npmbcnfjndwbkf2
1.0.0
npmbcs-compact
1.0.0
npmbgncvhferucfds
1.0.0
npmbgzxcuite2
1.0.0
npmbiklimaster
1.0.0
npmbiklirouter
1.0.0
npmbikliwrapper
1.0.0
npmbmgki3g6fh3
1.0.0
npmboring-vault
1.0.01.1.01.1.1
npmbvdfhdfvnk3
1.0.0
npmcamelot-ammv2-core
1.0.01.1.01.1.1
npmcamelot-ammv2-periphery
1.0.01.1.01.1.1
npmchina_airlines
1.0.0
npmchmjdsidwlf5
1.0.0
npmcjdfswifuem3
1.0.0
npmclxofwfjskaz7
1.0.0
npmcsbcldfvivwfgd4
1.0.0
npmcvbmxiowkwqla6
1.0.0
npmcvbniydplwe3
1.0.0
npmcvjwyinkpas
1.0.0
npmcvmbxcjiasdg
1.0.0
npmcvvkshuelwiu
1.0.0
npmcxcbdjxcmncvfg2
1.0.0
npmdakumangalsingh
1.0.01.0.11.1.0
npmdhjksficgwu2
1.0.0
npmdzcvhfruwluwe
1.0.0
npmdzvchorehui2
1.0.0
npmegair0810
1.0.0
npmegypt0811
1.0.0
npmenvpack-conf
1.0.1
npmfdhcvriwecv3
1.0.0
npmfghvbmniwu
1.0.0
npmfhj8cv9dkwm4
1.0.0
npmgdwkh6vcbu
1.0.0
npmhcfguyfrmblp
1.0.0
npmhfkcdyuwbdx1
1.0.0
npmhgdvfuflnb
1.0.0
npmhlksdcixycvf
1.0.0
npmhngfykuvgh4
1.0.0
npmhxckdoeaqjlc8
1.0.0
npminternallib_v392
1.0.0
npminternallib_v756
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.7
npmjhkxcixudnvm1
1.0.0
npmjkbnwsdf8
1.0.0
npmkanyut
1.0.0
npmkhanbmnxls
1.0.0
npmkit-map-vim
1.0.0
npmmcp-util-helpers
1.0.0
npmmnchfnvbue1
1.0.0
npmmnhdjoweuq
1.0.0
npmmnmobicom
1.0.0
npmmnteckets
1.0.0
npmmnzjgxciwadk
1.0.0
npmmobicommn
1.0.0
npmmobicwkgjmx
1.0.0
npmms_aidc_com_tw
1.0.0
npmnhdxzthponv5
1.0.0
npmnihzvdeowx5
1.0.0
npmnoxleys
1.0.0
npmpasskeys-react
1.0.1
npmpassport811
1.0.0
npmpermit2
1.0.01.0.1
npmprezdentkxheiw
1.0.0
npmsui-gql
1.0.0
npmsvelte-kit-vim
1.0.0
npmtailwind-form-templates
0.7.4
npmthundertiger
1.0.0
npmtruecxikdsal
1.0.0
npmtwcvhjlksdmx
1.0.0
npmunitel3
1.0.0
npmunitel4
1.0.0
npmupshift-config
0.5.14
npmupshift-finance
1.0.0
npmvczxijghsvizu4
1.0.0
npmverify-cli
99.0.0
npmvfgnhlkxchrd
1.0.0
npmvkldhcmieru6
1.0.0
npmvlbhvgovbbhfab
1.0.0
npmxcnvjfsiewlk9
1.0.0
npmxhjckswqivb
1.0.0
npmyangming708
1.0.0
npmyangming8
1.0.0
npm-2026-08-12-ghsa-malware-sweepSource advisory
Critical11 Aug 2026
38 packages tracked
GitHub Advisory npm CWE-506 sweep - 2026-08-11 batch (webhook.site Web3 typosquat credential-theft ring `@openzeppelin-4/5/contracts`+`@aerodrome-finance/contracts`+`@aerodrome-finance/slipstream`+`ethereum-vault-connector`, `safe-local-env-loader` env-local RAT sibling, `newtun` unencrypted-WebSocket PTY RAT with self-update, `svelte-vim-kit`+`kit-vim-map` map-streak-kit family continuation, `@nzeros/codebreak` Go ELF disguised as C solver, `base65-*` base-x typosquat cluster with 123KB obfuscated payload + `bs58-*` boilerplate siblings, coordinated `oastify.com`/`sslip.io`/webhook OAST dep-confusion recon beacons)
38 npm CWE-506 advisories published 2026-08-11. Headline: five-package Web3 typosquat ring (@openzeppelin-4/contracts, @openzeppelin-5/contracts, @aerodrome-finance/contracts, @aerodrome-finance/slipstream, ethereum-vault-connector) sharing the same webhook.site credential-exfil TTP with 60-240s detached-process delay + sandbox evasion, safe-local-env-loader continuing the 2026-08-10 env-local Windows RAT, and newtun shipping a PTY reverse shell with self-update.
npm
Affected packages38 packages · 117 versions
npm@aerodrome-finance/contracts
1.0.01.1.01.1.1
npm@aerodrome-finance/slipstream
1.0.01.1.01.1.1
npm@dgn-src-click-to-pay-org/srcdcfreleasecert
999.0.1
npm@nzeros/codebreak
1.3.0
npm@openzeppelin-4/contracts
1.0.01.0.1
npm@openzeppelin-5/contracts
1.0.01.0.1
npmbase65-11x
1.0.02.0.03.0.04.0.04.0.15.0.05.0.15.0.2
npmbase65-12x
1.0.02.0.03.0.04.0.04.0.15.0.05.0.15.0.2
npmbase65-13x
1.0.02.0.03.0.04.0.04.0.15.0.05.0.15.0.2
npmbase65-15x
1.0.02.0.03.0.04.0.04.0.15.0.05.0.15.0.2
npmbase65-33x
1.0.02.0.03.0.04.0.04.0.15.0.05.0.15.0.2
npmbase65-77x
1.0.02.0.03.0.04.0.04.0.15.0.05.0.15.0.2
npmbjm-low-code-components
99.0.0
npmbs58-11
1.0.0
npmbs58-12
1.0.0
npmbs58-13
1.0.0
npmchapters-core
9.999.999
npmdakumangalsingh_virus
1.0.01.2.01.3.0
npmdcfarguscert
999.0.1
npmdependencyfsdsfdsfg
99.9.0
npmdeveloper-dashboard
1.0.0
npmethereum-vault-connector
1.0.01.1.01.1.1
npmfetch-runtime
1.0.0
npmghazaly
99.9.0
npminternallib_v164
1.0.0
npmkit-vim-map
1.0.0
npmlines-columns
1.0.0
npmnewtun
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.131.0.141.0.151.0.161.0.171.0.181.0.191.0.201.0.211.0.221.0.231.0.241.0.251.0.261.0.27
npmnode-internal-svg-loader
1.0.0
npmsafe-local-env-loader
1.0.0
npmsui-bcs-codec
1.0.0
npmsui-gql-client
1.0.0
npmsvelte-vim-kit
1.0.0
npmtilaver-mfa
1.0.0
npmtsihealth-client
1.0.0
npmvite-svg-parse
1.0.0
npmwhs4_ued
1.0.0
npmzeal-rq-hooks
0.0.0
npm-2026-08-11-ghsa-malware-sweepSource advisory
Critical11 Aug 2026
7 packages tracked
GitHub Advisory PyPI CWE-506 sweep - 2026-08-11 batch (`joule-sbx-poc`+`joule-btp-extension` 2026-08-joule-btp-extension localhost-exfil + reverse-shell PROBABLY_PENTEST pair, `telebot-pro` 2026-08-telebot-pro Telegram-session hidden-thread infostealer, `euler-sdk`+`morpho-sdk` GENERIC-standard-pypi-install-pentest setup.py install-hook IP+username exfil, `dlmm-sdk`+`dlmm` 2026-08-dlmm MALICIOUS env-var + credential + crypto wallet-directory enumeration)
7 PyPI CWE-506 advisories published 2026-08-11 across four named campaigns: 2026-08-telebot-pro starts a hidden exfiltration thread that lifts Telegram session files, pictures, and connected WiFi network info; 2026-08-dlmm exfiltrates env vars + credentials + cryptocurrency wallet directory listings on import; 2026-08-joule-btp-extension + euler-sdk/morpho-sdk are PROBABLY_PENTEST setup.py install-hook recon packages targeting DeFi vendor namespaces.
PyPI
Affected packages7 packages · 14 versions
PyPIdlmm
1.0.0
PyPIdlmm-sdk
1.0.0
PyPIeuler-sdk
1.0.0
PyPIjoule-btp-extension
0.1.00.1.10.1.20.1.30.1.40.1.50.1.6
PyPIjoule-sbx-poc
0.1.0
PyPImorpho-sdk
1.0.0
PyPItelebot-pro
2.3.72.3.8
pypi-2026-08-11-ghsa-malware-sweepSource advisory
Critical10 Aug 2026
42 packages tracked
GitHub Advisory npm CWE-506 sweep - 2026-08-10 batch (`iconova-react` + `postcss-initial-provider` on-chain Ethereum RPC dead-drop C2 loader pair, `svelte-kit-streak`+`kit-map-streak` Linux implant continuation of the map-streak-kit family, `@rblxts/services` catbox.moe Windows RAT sibling of last week's `@rbx-ts/services`, `@kuperka/chainguard-sdk` browser-form + wallet exfil, `xerohub-discord-voice` Discord-token stealer, `env-local` Windows persistent screen-capture + remote control, `hex-encode-utils` Cloudflare-Workers AES-GCM Python-payload loader, `cryptostock`/`tokocrytodev` Infura wallet-drainer, `simple-date-formatter-new-9/10` bash reverse shell to 124.221.154.135:4444, `polymarket-stake-mathss` log-taker.store loader, `chai-tracker` chai-spies impersonator with `dbconnectify` C2, `@noobaihome/amis-*-area-widget` Baidu-internal dep-confusion SSRF probe, and multi-vendor SQLite/postcss/commonjs/eth-library typosquat clusters)
46 npm CWE-506 advisories published 2026-08-10. Standouts: iconova-react+postcss-initial-provider use Ethereum RPC on-chain dead-drop C2 to fetch stage-2 IP addresses (same EtherHiding technique as the CHAINDROP keyv/cacheable worm); svelte-kit-streak+kit-map-streak continue the map-streak-kit Linux-implant family; env-local installs a Windows registry-persisted screen-capture + remote-control implant impersonating dotenv.
npm
Affected packages42 packages · 74 versions
npm@kuperka/chainguard-sdk
1.0.11.0.2
npm@noobaihome/amis-simple-area-widget
1.0.0
npm@noobaihome/amis-uni-area-widget
1.0.0
npm@rblxts/services
1.6.01.6.2
npm@sqlite-labs/createsql
1.0.0
npm@sqlite-labs/nodesql
1.0.0
npm@sqlite-prime/createsql
1.0.0
npm@sqlite-prime/nodesql
1.0.0
npm@sqlite-table/schema-generator
1.0.0
npm@sqlite-table/sql-creator
1.0.0
npm@ssgw/icon
9.999.999
npmchai-as-bench
1.0.0
npmchai-as-deployer
1.0.0
npmchai-as-format
1.0.0
npmchai-as-map
1.0.0
npmchai-as-promised-plus
1.0.0
npmchai-jsonss
1.0.0
npmchai-tracker
1.1.01.1.11.1.21.1.31.2.1
npmcommonjs-assert
1.0.0
npmcommonjs-assertion
1.0.0
npmcryptostock
1.0.01.0.1
npmenv-local
18.4.018.4.118.4.2
npmeth-library-toolkit
1.0.0
npmeth-library-utils
1.0.0
npmfsbrowse
0.2.28
npmgodot-kit
1.0.1786316795
npmhex-encode-utils
1.0.01.0.11.0.21.0.31.0.41.0.5
npmiconova-react
1.30.01.30.1
npmkit-map-streak
1.0.0
npmneverthrow-js
1.0.0
npmpolymarket-stake-mathss
1.0.02.0.03.0.03.5.03.5.13.5.2
npmpost-css-transfer
1.0.0
npmpostcss-initial-provider
1.0.02.0.03.0.03.0.13.0.23.0.33.0.4
npmpostcss-theme-provider
1.0.0
npmruntimekit
1.0.0
npmsimple-date-formatter-new-10
1.0.0
npmsimple-date-formatter-new-9
1.0.0
npmspoint
0.1.6950.1.6960.1.6970.1.6980.1.6990.1.700
npmsvelte-kit-streak
1.0.0
npmtailwind-elements-ui
1.0.0
npmtokocrytodev
1.0.0
npmxerohub-discord-voice
1.0.01.0.1
npm-2026-08-10-ghsa-malware-sweepSource advisory
Critical10 Aug 2026
11 packages tracked
GitHub Advisory PyPI CWE-506 sweep - 2026-08-09..2026-08-11 batch (`neutrl-core`+`neutrl-contracts`+`plp-contract` credential-stealing dep-hidden campaign 2026-08-neutrl-core, `kotanku`+`kotoraka`+`btcflx`+`btcflip` Telegram-bot wallet-file exfiltrator quartet 2026-08-kotanku campaign, `pytablute` 2025-11-spellcheckers multi-stage RCE + polling C2, `chaintest` DPRK Contagious-Interview-adjacent browser+wallet+clipboard+SSH-key infostealer, `bigtime` open()-hook file-write exfiltrator 2026-08-bigtime campaign, `cubesat-upstream-driver` env-var reconnaissance dep-confusion PROBABLY_PENTEST)
11 PyPI CWE-506 advisories published 2026-08-09..2026-08-11 across four named campaigns: 2026-08-neutrl-core hides credential theft in an intentional malicious dependency (fake backdated GitHub history); 2026-08-kotanku ships four Telegram-bot cryptocurrency-wallet-file exfiltrators (kotanku, kotoraka, btcflx, btcflip); 2025-11-spellcheckers multi-stage RCE lands as pytablute; chaintest is a DPRK "Contagious Interview"-adjacent full-spectrum stealer.
PyPI
Affected packages11 packages · 20 versions
PyPIbigtime
0.1.0
PyPIbtcflip
0.1.0
PyPIbtcflx
0.1.0
PyPIchaintest
0.1.0
PyPIcubesat-upstream-driver
1.0.1
PyPIkotanku
0.1.0
PyPIkotoraka
0.1.0
PyPIneutrl-contracts
2.0.02.0.12.0.2
PyPIneutrl-core
2.0.02.0.12.0.2
PyPIplp-contract
2.0.02.0.12.0.2
PyPIpytablute
1.0.01.0.11.0.21.0.3
pypi-2026-08-10-ghsa-malware-sweepSource advisory
Critical8 Aug 2026
47 packages tracked
GitHub Advisory npm CWE-506 sweep - 36-package 2026-08-08 batch (`sme-rko-finance-front-*` 30-package Tinkoff/T-Bank RKO SME dep-confusion cluster running WEL1DROPPER-style cross-platform Cloudflare-Workers dropper + `@coralxyz/anchor` Solana Anchor typosquat with PowerShell zip drop + `titan-exchange-shared-permissions@99.9.9` dep-confusion recon + `@rbx-ts/services` Roblox-TS typosquat catbox.moe RAT + `map-streak-kit` Linux implant with systemd persistence + `localization-fixer`/`modern-localization` jsonbin.io mutable-payload loader pair)
36 npm CWE-506 advisories 2026-08-08: 30-package sme-rko-finance-front-* Tinkoff/T-Bank RKO dep-confusion cluster (v35.8.1, WEL1DROPPER-style Cloudflare-Workers dropper) plus outliers @coralxyz/anchor Solana typosquat, titan-exchange-shared-permissions@99.9.9 recon, @rbx-ts/services, map-streak-kit Linux implant, and a localization-fixer+modern-localization jsonbin.io loader pair.
npm
Affected packages47 packages · 53 versions
npm@coralxyz/anchor
0.30.00.30.10.30.2
npm@rbx-ts/services
1.6.0
npmbnpl-blocks-desktop-bnpl-anchor-title
35.2.5
npmlocalization-fixer
1.0.01.0.11.1.01.1.1
npmmap-streak-kit
1.0.0
npmmodern-localization
1.1.11.2.1
npmsme-rko-finance-front-operations-domain
35.8.1
npmsme-rko-finance-front-operations-fee
35.8.1
npmsme-rko-finance-front-operations-feed-impl
35.8.1
npmsme-rko-finance-front-operations-feed-models
35.8.1
npmsme-rko-finance-front-operations-holding-domain
35.8.1
npmsme-rko-finance-front-operations-income
35.8.1
npmsme-rko-finance-front-operations-notifications-impl
35.8.1
npmsme-rko-finance-front-operations-notifications-models
35.8.1
npmsme-rko-finance-front-operations-other
35.8.1
npmsme-rko-finance-front-operations-overnight
35.8.1
npmsme-rko-finance-front-operations-pegasus
35.8.1
npmsme-rko-finance-front-operations-penalty
35.8.1
npmsme-rko-finance-front-operations-providers
35.8.1
npmsme-rko-finance-front-operations-shared
35.8.1
npmsme-rko-finance-front-operations-special-payments
35.8.1
npmsme-rko-finance-front-operations-tax
35.8.1
npmsme-rko-finance-front-operations-widget-domain
35.8.1
npmsme-rko-finance-front-operations-widget-impl
35.8.1
npmsme-rko-finance-front-operations-widget-models
35.8.1
npmsme-rko-finance-front-payment-registers-operations-domain
35.8.1
npmsme-rko-finance-front-payments-allowed-tariffs-filter
35.8.1
npmsme-rko-finance-front-payments-classic-payment-actions-operations-repeat-impl
35.8.1
npmsme-rko-finance-front-payments-classic-payment-actions-operations-repeat-models
35.8.1
npmsme-rko-finance-front-payments-currency-payment-actions-operations-repeat-impl
35.8.1
npmsme-rko-finance-front-payments-currency-payment-actions-operations-repeat-models
35.8.1
npmsme-rko-finance-front-payments-currency-payment-domain
35.8.1
npmsme-rko-finance-front-payments-domain
35.8.1
npmsme-rko-finance-front-payments-feed-adapter
35.8.1
npmsme-rko-finance-front-payments-feed-display-list
35.8.1
npmsme-rko-finance-front-payments-feed-display-list-impl
35.8.1
npmspecials-resources-server
35.8.1
npmstatist-browser-typed-client-eventea.projects.pwafamily
35.8.0
npmstatist-browser-typed-client-eventea.projects.pwahelp
35.8.0
npmstatist-browser-typed-client-eventea.projects.pwainsurance
0.0.1
npmstatist-browser-typed-client-eventea.projects.pwakasko
0.0.1
npmstatist-browser-typed-client-eventea.projects.tdeal
0.0.1
npmstatist-browser-typed-client-eventea.projects.tdevice
0.0.1
npmstreak-map-kit
1.0.0
npmsvelte-kit-cache
1.0.0
npmsvelte-streak-kit
1.0.0
npmtitan-exchange-shared-permissions
99.9.9
npm-2026-08-08-ghsa-malware-sweepSource advisory
High8 Aug 2026
1 package tracked
GitHub Advisory PyPI CWE-506 sweep - 2026-08-08 batch (`riakcs` Basho Riak-CS Python client typosquat with setup.py install-time host reconnaissance)
GHSA published one PyPI CWE-506 advisory dated 2026-08-08: riakcs (v0.0.1 and v0.5.0) - a typosquat/naming-collision on Basho Riak-CS Python client. Overrides setup.py install to silently exfiltrate the installer host IP + username at install time. OpenSSF MAL-2026-13665, discovery credit kam193.
PyPI
Affected packages1 package · 2 versions
PyPIriakcs
0.0.10.5.0
pypi-2026-08-08-ghsa-malware-sweepSource advisory
Critical7 Aug 2026
32 packages tracked
GitHub Advisory npm CWE-506 sweep - 33+ package 2026-08-07 batch (`remote-claude-daemon` full-desktop RAT via WebSocket relay + baileys-clone WhatsApp bot cluster + `@cats-cdf/*` OAST recon pair + `internallib_v514` internal LAN reverse-shell + `wormgpt-cli` LLM-branded RAT + `@united-airlines-org/atmos-design-system` dep-confusion + `@ks-video/kwai-player-web` telemetry beacon + `@avi892nash/aegis-grid-runner` Juspay-leaked internal RCE tool + `@junyoung-kim/reins` PTY-reverse-shell with systemd persistence + `noviembrenacional.com` WordPress-CSRF nuke pair + long tail)
GHSA published 33+ npm CWE-506 advisories dated 2026-08-07 spanning several clusters: remote-claude-daemon (Claude Code full-desktop RAT with screen + mic capture via WebSocket relay, 20 versions), a 4-package baileys-clone WhatsApp bot cluster (@prototypevip/baileys, diezyclutch-baileys, ynastore-baileys, and more), @cats-cdf/* OAST dep-confusion recon, internallib_v514 reverse-shell to hardcoded 10.0.70.90 (continuation of internallib_v<NNN> campaign), wormgpt-cli (LLM-branded RAT with clipboard theft), @united-airlines-org/atmos-design-system dep-confusion, @ks-video/kwai-player-web telemetry beacon, @avi892nash/aegis-grid-runner (leaked-internal-Juspay RCE tool), @junyoung-kim/reins (PTY reverse-shell with systemd persistence), and xxdxax+xdaxx (targeted WordPress CSRF/account-nuke against noviembrenacional.com).
npm
Affected packages32 packages · 73 versions
npm@avi892nash/aegis-grid-runner
0.3.00.3.10.3.20.3.3
npm@cats-cdf/authentication
2.17.13.1.1
npm@cats-cdf/browser-metrics-meter
2.0.03.1.1
npm@junyoung-kim/reins
0.1.60.1.7
npm@ks-video/kwai-player-web
9.1.09.1.19.1.2
npm@prototypevip/baileys
0.0.10.0.20.0.3
npm@united-airlines-org/atmos-design-system
40.0.040.1.041.0.0
npmcdf-tag-commander-helper
1.0.0
npmdiezyclutch-baileys
1.0.0
npmdpdgroup-css
1.0.0
npminternallib_v514
1.0.0
npmlib-frontsga
1.0.0
npmmerge-grid-stats
1.0.0
npmrdfxvela
1.0.0
npmrdfxvela-build
1.0.0
npmremote-claude-daemon
0.3.00.3.40.3.50.3.60.3.70.3.80.3.90.4.20.4.60.4.70.5.00.5.20.5.40.5.50.5.70.5.90.6.00.6.10.6.20.6.6
npmsqueez
1.0.0
npmstreak-map-cache
1.0.0
npmstretchshop
1.0.0
npmsupersig
1.0.0
npmtrimprompt
1.0.0
npmvelabuild
1.0.0
npmvite-plugin-cleaner
1.0.0
npmvite-svg-parse
1.0.0
npmvite-vue-path-map
1.0.0
npmweight2loss
1.0.0
npmwormgpt-cli
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.8
npmwos-library-ui
1.0.0
npmxdaxx
1.0.01.0.1
npmxxdxax
1.0.01.0.1
npmynastore-baileys
1.0.0
npmzyr-agent
1.0.0
npm-2026-08-07-ghsa-malware-sweepSource advisory
Critical7 Aug 2026
10 packages tracked
GitHub Advisory PyPI CWE-506 sweep - 10-package 2026-08-07 batch (`2026-08-alphalend-layouts` Sui keystore-stealer pair with PTH persistence + `2026-08-flasq` typosquat wave: `pydanticc`+`flasq`+`idnna`+`fastapii`+`fast-hashes`+`speed-hashes` crypto-wallet stealers + `cdktn-provider-azurerm` cdktf HashiCorp jsii-chain typosquat + `atlas-internal` dep-confusion recon)
GHSA published 10 PyPI CWE-506 advisories dated 2026-08-07 across three clusters: 2026-08-alphalend-layouts Sui keystore-stealer pair with PTH file persistence (alphalend-layouts, alphalend-abi); 2026-08-flasq typosquat wave dropping crypto-wallet stealers (pydanticc, flasq, idnna, fastapii, fast-hashes, speed-hashes); and singletons cdktn-provider-azurerm (HashiCorp cdktf typosquat with jsii import-time chain) and atlas-internal (dep-confusion recon).
PyPI
Affected packages10 packages · 27 versions
PyPIalphalend-abi
1.0.01.0.11.1.0
PyPIalphalend-layouts
4.0.04.0.14.0.24.1.0
PyPIatlas-internal
1.8.1
PyPIcdktn-provider-azurerm
17.0.0
PyPIfast-hashes
0.1.0
PyPIfastapii
0.1.10.1.20.2.00.3.0
PyPIflasq
0.1.10.1.20.2.00.3.0
PyPIidnna
0.1.10.1.20.2.00.3.0
PyPIpydanticc
0.1.10.1.20.2.00.3.0
PyPIspeed-hashes
0.1.0
pypi-2026-08-07-ghsa-malware-sweepSource advisory
Critical6 Aug 2026
58 packages tracked
GitHub Advisory npm CWE-506 sweep - 50+ package 2026-08-06 batch (Sui-blockchain `sui-migration-audit-*` + `move-bcs-codec` cluster, `@activepieces/piece-*` typosquat sweep, `@ccfly/setup-*` platform-binary quartet, `@addai/*` cluster, `claude-remote-agent` RAT, `diezyyasha-baileys` + `alipclutch-baileys` WhatsApp cluster, `@holocronlab/botruntime-runtime` bot-framework masquerade, `helmet-pro` + `agenttunnels` + `agenthub-multiagent-mcp` + `typst-resume-cli` misc)
GHSA published 50+ npm CWE-506 advisories dated 2026-08-06 spanning several clusters: Sui blockchain tooling (sui-migration-audit-cli, sui-graphql-client, sui-migration-audit-rules, move-bcs-codec), an @activepieces/piece-* typosquat sweep (piece-google-contacts, piece-google-bigquery, piece-google-forms, piece-base44), a @ccfly/setup-* platform-binary quartet (darwin-arm64, darwin-x64, linux-arm64, linux-x64), an @addai/* cluster (ainode, node, entity-runtime), claude-remote-agent RAT, WhatsApp diezyyasha-baileys + alipclutch-baileys sibling clones, @holocronlab/botruntime-runtime bot framework masquerade, and a long tail of enterprise-scope dep-confusion probes.
npm
Affected packages58 packages · 58 versions
npm@0l00000l/auth
1.0.0
npm@activepieces/piece-base44
1.0.0
npm@activepieces/piece-google-bigquery
1.0.0
npm@activepieces/piece-google-contacts
1.0.0
npm@activepieces/piece-google-forms
1.0.0
npm@addai/ainode
1.0.0
npm@addai/entity-runtime
1.0.0
npm@addai/node
1.0.0
npm@apicity/meta
1.0.0
npm@astralcore/aura-wb
1.0.0
npm@atom8n/inspector
1.0.0
npm@aubea/mars
1.0.0
npm@bananacool467/ui-tools
1.0.0
npm@ccfly/setup-darwin-arm64
1.0.0
npm@ccfly/setup-darwin-x64
1.0.0
npm@ccfly/setup-linux-arm64
1.0.0
npm@ccfly/setup-linux-x64
1.0.0
npm@chnayser/server
1.0.0
npm@holocronlab/botruntime-runtime
1.0.0
npm@innocarpe/deepseek-build
1.0.0
npm@leejungkiin/awkit
1.0.0
npm@love-moon/conductor-cli
1.0.0
npm@trackunit/iris-app-sdk-vite
1.0.0
npm@vanexalabs-ai/vanexa-agent
1.0.0
npm@xiaohhhh1/canvas-agent
1.0.0
npm9remote
1.0.0
npmagenthub-multiagent-mcp
1.0.0
npmagenttunnels
1.0.0
npmalipclutch-baileys
1.0.0
npmapp-api-sdk
1.0.0
npmbeautiful-ui-monitoring
1.0.0
npmbigops-tcrm-permissions
1.0.0
npmclaude-remote-agent
1.0.0
npmdevplatform-data-table
1.0.0
npmdevplatform-jscodeshift-utils
1.0.0
npmdevplatform-spa-plugin-error-boundary
1.0.0
npmdevplatform-vite-plugin-gle
1.0.0
npmdiezyyasha-baileys
1.0.0
npmezdiscordbots
1.0.0
npmfetchrtds
1.0.0
npmhelmet-pro
1.0.0
npmjagproject
1.0.0
npmmove-bcs-codec
1.0.0
npmnpm-dc-dev
1.1.1
npmstatist-browser-typed-client-sme.rko.tariffs.web
1.0.0
npmstatist-statist-core
1.0.0
npmstreak-cache-map
1.0.0
npmsui-graphql-client
1.0.0
npmsui-migration-audit-cli
1.0.0
npmsui-migration-audit-rules
1.0.0
npmsvelte-visual-map
1.0.0
npmtailwindcss-hide-scrollbar
1.0.0
npmtinkoff-boxy-desktop-two-panel-right-image
1.0.0
npmtinkoff-codeceptjs-storyshots-alpha
1.0.0
npmtsihealth-client
1.0.0
npmtui-react-tooltip
1.0.0
npmtypst-resume-cli
1.0.0
npmvitest-preview-pro-all
1.0.0
npm-2026-08-06-ghsa-malware-sweepSource advisory
Critical6 Aug 2026
3 packages tracked
GitHub Advisory PyPI CWE-506 sweep - 3-package 2026-08-06 batch (`xAyOuB-XcTxTeaM` Garena Free Fire spam-cannon botnet + `uncrypt` browser infostealer + `decapod-common` pentest)
GHSA published 3 PyPI CWE-506 advisories dated 2026-08-06: xAyOuB-XcTxTeaM (Garena Free Fire spam-cannon opening a Flask server on 0.0.0.0:50019 with ~20 hardcoded account credentials for gaming-platform abuse), uncrypt (embedded-executable browser-data infostealer with sandbox detection, campaign 2026-08-uncrypt), and decapod-common (pentest host-recon under GENERIC-standard-pypi-install-pentest).
PyPI
Affected packages3 packages · 9 versions
PyPIdecapod-common
0.0.01.2.dev11.2.dev2
PyPIuncrypt
0.1.00.1.10.1.2
PyPIxAyOuB-XcTxTeaM
0.1.00.1.10.1.2
pypi-2026-08-06-ghsa-malware-sweepSource advisory
Critical5 Aug 2026
42 packages tracked
GitHub Advisory npm CWE-506 sweep - 40+ package 2026-08-05 batch (massive Tinkoff Bank / dolyame BNPL / bnpl-blocks / tramvai / statist enterprise-scope dep-confusion burst, plus `clawtrl-wallet` crypto stealer + `sextant-cli-darwin-arm64` platform-binary + `@lizhao1/memorax-code-internal` + `@cliphijack/santaclaude` Claude-themed clipboard hijack + `llm-interceptor` + `multi-acct` + `kepler`)
GHSA published 40+ npm CWE-506 advisories dated 2026-08-05 dominated by a massive Tinkoff Bank (Russian bank) enterprise-scope dep-confusion burst: tinkoff-*, dolyame-boxy-* (Tinkoff BNPL), bnpl-blocks-atom-*, tramvai-* (Tinkoff's open-source framework), bigops-*, sme.rko.* internal namespaces. Also clawtrl-wallet (crypto wallet stealer), @cliphijack/santaclaude (Claude-themed clipboard hijack), sextant-cli-darwin-arm64, @lizhao1/memorax-code-internal, llm-interceptor, multi-acct, kepler, express-dever, svelte-mapped-metrics, streak-math-calc, streak-calc-metrics, svelte-mapping-core, eslint-plugin-vitest-ts, tailwindcss-scrollbar-hide, express-rate-controller, @stageflight-testbed/a, @workoscalif/sudoku, trapp-check-logs, sme-foundation-frame-manager.
npm
Affected packages42 packages · 42 versions
npm@cliphijack/santaclaude
1.0.0
npm@ikbal_fadilah_vanexa01/vanexa-agent
1.0.0
npm@lizhao1/memorax-code-internal
1.0.0
npm@stageflight-testbed/a
1.0.0
npm@workoscalif/sudoku
1.0.0
npmbigops-auth
1.0.0
npmbnpl-blocks-atom-bnpl-action-card
1.0.0
npmbnpl-blocks-atom-bnpl-badge
1.0.0
npmbnpl-blocks-atom-bnpl-dolyame-button
1.0.0
npmbnpl-blocks-atom-bnpl-dropdown
1.0.0
npmbnpl-blocks-atom-bnpl-email-form
1.0.0
npmbnpl-blocks-atom-bnpl-info-card
1.0.0
npmbnpl-blocks-atom-bnpl-integrations-breadcrumbs
1.0.0
npmbnpl-blocks-atom-bnpl-news-card
1.0.0
npmclawtrl-wallet
1.0.0
npmdolyame-boxy-desktop-bnpl-text-block
1.0.0
npmdolyame-boxy-fonts
1.0.0
npmdolyame-boxy-independent-bnpl-info-slider
1.0.0
npmdolyame-boxy-independent-bnpl-items
1.0.0
npmdolyame-boxy-independent-bnpl-partners
1.0.0
npmdolyame-boxy-independent-bnpl-picture-gallery
1.0.0
npmdolyame-boxy-independent-bnpl-search
1.0.0
npmeslint-plugin-vitest-ts
1.0.0
npmexpress-dever
1.0.0
npmexpress-rate-controller
1.0.0
npmkepler
1.0.0
npmllm-interceptor
1.0.0
npmmulti-acct
1.0.0
npmsextant-cli-darwin-arm64
1.0.0
npmsme-foundation-frame-manager
1.0.0
npmstreak-calc-metrics
1.0.0
npmstreak-math-calc
1.0.0
npmsvelte-mapped-metrics
1.0.0
npmsvelte-mapping-core
1.0.0
npmtailwindcss-scrollbar-hide
1.0.0
npmtinkoff-pfp-block-desktop-tabs
1.0.0
npmtinkoff-statist-browser-typed-client-itsa.candy.selfservicesupport.frontend.events
1.0.0
npmtinkoff-statist-browser-typed-client-sme.rko.origsmartphonepaytb.common.mobile.events
1.0.0
npmtinkoff-volna-zustate
1.0.0
npmtramvai-module-feature-toggle
1.0.0
npmtrapp-check-logs
1.0.0
npmvvvedernikov-test-another-test
1.0.0
npm-2026-08-05-ghsa-malware-sweepSource advisory
Critical5 Aug 2026
4 packages tracked
GitHub Advisory PyPI CWE-506 sweep - 4-package 2026-08-05 batch (`2026-08-bip39-py` crypto-wallet infostealer campaign: `solana-sniper-bot` + `eth-account-wallet` + `mnemonic-py` + `defi-sdk-py`)
GHSA published 4 PyPI CWE-506 advisories dated 2026-08-05, all attributed to campaign 2026-08-bip39-py: solana-sniper-bot, eth-account-wallet, mnemonic-py, and defi-sdk-py. All four use setup.py install-command override to exfiltrate env vars, browser data, crypto wallet files, SSH keys, and configuration files. Cross-chain crypto-wallet targeting (Solana + Ethereum + generic mnemonic phrases + DeFi).
PyPI
Affected packages4 packages · 4 versions
PyPIdefi-sdk-py
2.5.1
PyPIeth-account-wallet
0.11.2
PyPImnemonic-py
0.21
PyPIsolana-sniper-bot
1.4.2
pypi-2026-08-05-ghsa-malware-sweepSource advisory
Critical4 Aug 2026
443 packages tracked
keyv / cacheable family hijacked in Shai-Hulud "Here We Go Again" worm
On 2026-08-04 a compromised maintainer account pushed a preinstall credential stealer into the keyv / cacheable family and the worm spread via stolen npm tokens across ~2B monthly installs. Releases were cut from main, so npm signed them with valid provenance. Verified count as of the Wiz IOC feed: 443 npm packages across 2,235 versions; SafeDep's registry-backed telemetry puts the total at 1,684 versions across 420 names tied to nine orgs.
npm
Affected packages443 packages · 2235 versions
npm@adminide-stack/clock-tik-browser
12.0.24
npm@adminide-stack/yantra-mobile
12.0.33
npm@arv-bedrock/auth
1.1.71.1.8
npm@arv-bedrock/auth-admin
1.0.21.0.3
npm@arv-bedrock/auth-sso
1.6.11.6.2
npm@arv-bedrock/auth-sso-backend
1.7.11.7.2
npm@arv-bedrock/logger
1.7.11.7.2
npm@cacheable/memory
2.2.1
npm@cacheable/net
2.1.1
npm@cacheable/node-cache
3.1.2
npm@cacheable/utils
2.5.1
npm@deliveroo/determinator
0.2.1
npm@deliveroo/reevent
1.0.1
npm@hubsync/web-sdk-react
6.3.76.3.86.3.96.3.106.3.116.3.126.3.136.3.146.3.156.3.166.3.176.3.186.3.196.3.206.3.216.3.226.3.236.3.246.3.256.3.266.3.276.3.286.3.296.3.306.3.316.3.326.3.33
npm@nebula.js/cli
7.1.2
npm@nebula.js/cli-build
7.1.2
npm@nebula.js/cli-sense
7.1.2
npm@nebula.js/locale
0.6.2
npm@nebula.js/nucleus
0.5.1
npm@nebula.js/sn-action-button
2.3.1
npm@nebula.js/sn-animator
2.13.1
npm@nebula.js/sn-distributionplot
1.0.7
npm@nebula.js/sn-layout-container
4.4.1
npm@nebula.js/sn-line-chart
2.7.1
npm@nebula.js/sn-listbox
0.19.3
npm@nebula.js/sn-map
0.12.7
npm@nebula.js/sn-nav-menu
0.14.2
npm@nebula.js/sn-org-chart
1.7.1
npm@nebula.js/sn-shape
1.5.1
npm@nebula.js/sn-slider
0.20.1
npm@nebula.js/sn-tabbed-container
2.4.1
npm@nebula.js/snapshooter
0.6.1
npm@nebula.js/stardust
7.1.2
npm@nebula.js/test-utils
0.6.1
npm@nebula.js/theme
0.6.1
npm@onereach/authorizer-helper
0.0.110.0.120.0.13
npm@onereach/bandwidth-steps-voice-bxml
0.1.10.1.20.1.3
npm@onereach/billing-dto
27.2.127.2.227.2.3
npm@onereach/billing-shared
27.2.127.2.227.2.3
npm@onereach/cb-schema-translator
1.3.11.3.21.3.3
npm@onereach/channel-transformer
0.0.660.0.670.0.68
npm@onereach/channel-transformers
0.0.50.0.60.0.7
npm@onereach/ckeditor5-build-classic
30.0.130.0.230.0.3
npm@onereach/condition-builder
1.0.81.0.91.0.10
npm@onereach/content-builder
0.0.180.0.190.0.20
npm@onereach/content-builder-template-compiler
0.0.30.0.40.0.5
npm@onereach/expression-components
9.1.19.1.29.1.3
npm@onereach/font-icons
27.0.227.0.327.0.4
npm@onereach/get-version-data
3.1.23.1.33.1.4
npm@onereach/idw-apps
0.1.30.1.40.1.5
npm@onereach/idw-contracts
0.1.20.1.30.1.4
npm@onereach/idw-init-account-resources
1.0.11.0.21.0.3
npm@onereach/idw-sdk
0.1.20.1.30.1.4
npm@onereach/idw-ui-components
0.1.20.1.30.1.4
npm@onereach/lambda-invocation
1.2.11.2.21.2.3
npm@onereach/messengers-infobip-sdk
0.1.10.1.20.1.3
npm@onereach/or-browser
0.0.480.0.490.0.50
npm@onereach/or-browser-next
0.0.110.0.120.0.13
npm@onereach/or-content-builder-renderer
0.0.20.0.30.0.4
npm@onereach/or-file-uploader-next
0.0.80.0.90.0.10
npm@onereach/or-pro
1.13.11.13.21.13.3
npm@onereach/or-sdk-agent-cli
0.0.60.0.70.0.8
npm@onereach/orest-cli
2.4.12.4.22.4.3
npm@onereach/orest-input-cli
1.18.11.18.21.18.3
npm@onereach/orest-jest-presets
0.0.30.0.40.0.5
npm@onereach/orest-vue-demi-vue2
0.0.40.0.50.0.6
npm@onereach/orest-vue-demi-vue3
0.0.40.0.50.0.6
npm@onereach/orest-vue3
0.0.40.0.50.0.6
npm@onereach/phonenumber-interpreter
0.0.180.0.190.0.20
npm@onereach/pnpm-audit-junit
1.0.31.0.41.0.5
npm@onereach/postcss-scoped-selector
1.2.11.2.21.2.3
npm@onereach/regex-helper
0.5.160.5.170.5.18
npm@onereach/regular-expressions
0.5.230.5.240.5.25
npm@onereach/regular-expressions-test
0.0.40.0.50.0.6
npm@onereach/rwc-client
6.4.76.4.86.4.9
npm@onereach/salesforce-miaw-client
0.0.30.0.40.0.5
npm@onereach/si-a-button
0.0.30.0.40.0.5
npm@onereach/si-alert
0.4.110.4.120.4.13
npm@onereach/si-checkbox
0.6.50.6.60.6.7
npm@onereach/si-checkbox-group
0.3.50.3.60.3.7
npm@onereach/si-code
0.6.40.6.50.6.6
npm@onereach/si-collapsible-group
0.6.40.6.50.6.6
npm@onereach/si-copyable-text
0.4.110.4.120.4.13
npm@onereach/si-datepicker
0.4.50.4.60.4.7
npm@onereach/si-divider
0.4.110.4.120.4.13
npm@onereach/si-dropdown-advanced
0.4.50.4.60.4.7
npm@onereach/si-dropdown-simple
0.4.50.4.60.4.7
npm@onereach/si-header
0.4.110.4.120.4.130.4.14
npm@onereach/si-list
0.7.40.7.50.7.6
npm@onereach/si-merge-tag-input
0.4.50.4.60.4.7
npm@onereach/si-radio-group
0.3.50.3.60.3.7
npm@onereach/si-root
0.9.40.9.50.9.6
npm@onereach/si-select
0.1.30.1.40.1.5
npm@onereach/si-step-chooser
0.4.40.4.50.4.6
npm@onereach/si-switch
0.4.50.4.60.4.7
npm@onereach/si-text-message
0.4.50.4.60.4.7
npm@onereach/si-textinput
0.5.50.5.60.5.7
npm@onereach/si-validated-timestring-input
0.3.50.3.60.3.7
npm@onereach/slack-helpers
1.0.31.0.41.0.5
npm@onereach/ssml-editor
2.0.122.0.132.0.14
npm@onereach/step-components
0.1.370.1.380.1.39
npm@onereach/step-conversation
1.0.411.0.421.0.43
npm@onereach/step-run-snowflake-query
0.1.10.1.20.1.3
npm@onereach/step-voice
7.0.327.0.337.0.34
npm@onereach/styles
27.0.227.0.327.0.4
npm@onereach/time-interpreter
1.0.301.0.311.0.32
npm@onereach/ts-memoize
1.0.21.0.31.0.4
npm@onereach/types-contacts-api
9.0.89.0.99.0.10
npm@onereach/ui-components
27.0.227.0.327.0.4
npm@onereach/ui-components-common
27.0.227.0.327.0.4
npm@onereach/ui-components-vue2
27.0.227.0.327.0.4
npm@onereach/v-event-calendar
0.1.220.1.230.1.24
npm@onereach/webform
0.3.130.3.140.3.15
npm@or-sdk/account-settings
1.3.61.3.71.3.8
npm@or-sdk/accounts
2.3.52.3.62.3.7
npm@or-sdk/adapters
0.3.60.3.70.3.8
npm@or-sdk/agents
4.21.34.21.44.21.5
npm@or-sdk/api-tokens
1.4.21.4.31.4.4
npm@or-sdk/api-tokens-lambda
1.4.21.4.31.4.4
npm@or-sdk/apps
1.2.61.2.71.2.8
npm@or-sdk/auth
0.38.10.38.20.38.3
npm@or-sdk/authorizer
0.26.70.26.80.26.9
npm@or-sdk/base
0.44.40.44.50.44.6
npm@or-sdk/billing
27.2.127.2.227.2.3
npm@or-sdk/billing-internal
27.2.127.2.227.2.3
npm@or-sdk/bot-templates
2.2.52.2.62.2.7
npm@or-sdk/bots
1.7.11.7.21.7.3
npm@or-sdk/card-templates
2.2.52.2.62.2.7
npm@or-sdk/cards
1.2.51.2.61.2.7
npm@or-sdk/ccp
10.15.410.15.510.15.6
npm@or-sdk/chat
0.3.10.3.20.3.3
npm@or-sdk/contacts
4.7.54.7.64.7.7
npm@or-sdk/content-request
0.2.60.2.70.2.8
npm@or-sdk/data-hub
0.26.50.26.60.26.7
npm@or-sdk/data-hub-svc
2.3.52.3.62.3.7
npm@or-sdk/deployer
1.7.51.7.61.7.7
npm@or-sdk/deployments
2.1.52.1.62.1.7
npm@or-sdk/discovery
1.12.11.12.21.12.3
npm@or-sdk/druid
1.4.71.4.81.4.9
npm@or-sdk/event-manager
1.1.51.1.61.1.7
npm@or-sdk/files
3.11.63.11.73.11.8
npm@or-sdk/files-sync-node
0.1.80.1.90.1.10
npm@or-sdk/flow-templates
2.1.52.1.62.1.7
npm@or-sdk/flows
2.7.82.7.92.7.10
npm@or-sdk/graph
1.10.51.10.61.10.7
npm@or-sdk/hitl
0.41.10.41.20.41.3
npm@or-sdk/identifiers
0.27.60.27.70.27.8
npm@or-sdk/idw
9.0.49.0.59.0.6
npm@or-sdk/idw-public
1.6.61.6.71.6.8
npm@or-sdk/idw-skill
1.4.11.4.21.4.3
npm@or-sdk/invitations
1.4.81.4.91.4.10
npm@or-sdk/key-value-storage
0.28.60.28.70.28.8
npm@or-sdk/keys
1.2.61.2.71.2.8
npm@or-sdk/knowledge-models
0.25.50.25.60.25.7
npm@or-sdk/library
0.5.60.5.70.5.8
npm@or-sdk/library-categories
0.2.60.2.70.2.8
npm@or-sdk/library-source
0.4.50.4.60.4.7
npm@or-sdk/library-types-v1
9.0.19.0.29.0.3
npm@or-sdk/library-types-v2
9.0.19.0.29.0.3
npm@or-sdk/lookup
1.25.11.25.21.25.3
npm@or-sdk/markdowner
0.5.10.5.20.5.3
npm@or-sdk/mcp-tools
0.5.20.5.30.5.4
npm@or-sdk/notifications
1.7.51.7.61.7.7
npm@or-sdk/password
1.3.61.3.71.3.8
npm@or-sdk/payments
3.2.53.2.63.2.7
npm@or-sdk/permissions
2.8.12.8.22.8.3
npm@or-sdk/permissions-cli
1.4.11.4.21.4.3
npm@or-sdk/permissions-lambda
2.5.12.5.22.5.3
npm@or-sdk/pgsql
1.5.11.5.21.5.3
npm@or-sdk/providers
0.3.60.3.70.3.8
npm@or-sdk/qna
3.4.23.4.33.4.4
npm@or-sdk/queue-manager
1.4.61.4.71.4.8
npm@or-sdk/sdk-api
0.29.20.29.30.29.4
npm@or-sdk/settings
0.25.60.25.70.25.8
npm@or-sdk/sku-builder
2.5.12.5.22.5.3
npm@or-sdk/source
2.1.52.1.62.1.7
npm@or-sdk/source-api
1.1.11.1.21.1.3
npm@or-sdk/step-templates
2.2.52.2.62.2.7
npm@or-sdk/store
2.1.52.1.62.1.7
npm@or-sdk/tables
0.28.50.28.60.28.7
npm@or-sdk/tags
1.1.51.1.61.1.7
npm@or-sdk/tickets
1.9.51.9.61.9.7
npm@or-sdk/transcripts
1.2.51.2.61.2.7
npm@or-sdk/users
3.8.13.8.23.8.3
npm@or-sdk/view-templates
2.2.52.2.62.2.7
npm@or-sdk/views
3.1.53.1.63.1.7
npm@or-sdk/web-search
0.6.10.6.20.6.3
npm@ornikar/apollo-link-timeout
1.4.21.4.31.4.41.4.51.4.61.4.71.4.81.4.91.4.101.4.11
npm@ornikar/babel-preset-base
6.0.36.0.46.0.56.0.66.0.76.0.86.0.96.0.106.0.116.0.126.0.136.0.14
npm@ornikar/babel-preset-kitt-universal
8.0.38.0.48.0.58.0.68.0.78.0.88.0.98.0.108.0.118.0.12
npm@ornikar/babel-preset-react
6.1.46.1.56.1.66.1.76.1.86.1.96.1.106.1.116.1.126.1.136.1.14
npm@ornikar/browserslist-config
8.0.38.0.48.0.58.0.68.0.78.0.88.0.98.0.108.0.11
npm@ornikar/commitlint-config
8.3.28.3.38.3.48.3.58.3.68.3.78.3.88.3.98.3.108.3.118.3.12
npm@ornikar/eslint-config
24.0.124.0.224.0.324.0.424.0.524.0.624.0.724.0.824.0.924.0.1024.0.1124.0.12
npm@ornikar/eslint-config-babel
24.0.124.0.224.0.324.0.424.0.524.0.624.0.724.0.824.0.924.0.1024.0.1124.0.12
npm@ornikar/eslint-config-babel-use
13.2.113.2.213.2.313.2.413.2.513.2.613.2.713.2.813.2.913.2.1013.2.1113.2.12
npm@ornikar/eslint-config-formatjs
24.0.124.0.224.0.324.0.424.0.524.0.624.0.724.0.824.0.924.0.10
npm@ornikar/eslint-config-node
12.2.112.2.212.2.312.2.412.2.512.2.612.2.712.2.812.2.912.2.10
npm@ornikar/eslint-config-react
24.0.124.0.224.0.324.0.424.0.524.0.624.0.724.0.824.0.924.0.1024.0.11
npm@ornikar/eslint-config-typescript
24.0.124.0.224.0.324.0.424.0.524.0.624.0.724.0.824.0.924.0.10
npm@ornikar/eslint-config-typescript-nestjs
24.0.124.0.224.0.324.0.424.0.524.0.624.0.724.0.824.0.924.0.1024.0.11
npm@ornikar/eslint-config-typescript-react
24.0.124.0.224.0.324.0.424.0.524.0.624.0.724.0.824.0.924.0.1024.0.11
npm@ornikar/eslint-plugin-neverthrow
1.3.11.3.21.3.31.3.41.3.51.3.61.3.71.3.81.3.91.3.101.3.111.3.12
npm@ornikar/eslint-plugin-ornikar
24.0.124.0.224.0.324.0.424.0.524.0.624.0.724.0.824.0.924.0.1024.0.11
npm@ornikar/graphql-config
1.1.11.1.21.1.31.1.41.1.51.1.61.1.71.1.81.1.91.1.101.1.11
npm@ornikar/intl-config
10.0.210.0.310.0.410.0.510.0.610.0.710.0.810.0.910.0.10
npm@ornikar/jest-config
13.0.313.0.413.0.513.0.613.0.713.0.813.0.913.0.1013.0.1113.0.1213.0.13
npm@ornikar/jest-config-react
18.0.218.0.318.0.418.0.518.0.618.0.718.0.818.0.918.0.1018.0.11
npm@ornikar/jest-config-react-native
17.0.217.0.317.0.417.0.517.0.617.0.717.0.817.0.917.0.1017.0.1117.0.12
npm@ornikar/jest-config-react-native-web
12.0.312.0.412.0.512.0.612.0.712.0.812.0.912.0.1012.0.1112.0.1212.0.13
npm@ornikar/kitt2
1.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.11
npm@ornikar/lerna-config
11.0.111.0.211.0.311.0.411.0.511.0.611.0.711.0.811.0.911.0.1011.0.11
npm@ornikar/monorepo-config
14.3.214.3.314.3.414.3.514.3.614.3.714.3.814.3.914.3.1014.3.1114.3.1214.3.13
npm@ornikar/postcss-config
9.1.29.1.39.1.49.1.59.1.69.1.79.1.89.1.99.1.109.1.119.1.12
npm@ornikar/prettier-config
9.0.39.0.49.0.59.0.69.0.79.0.89.0.99.0.109.0.11
npm@ornikar/prismic-components
0.0.20.0.30.0.40.0.50.0.60.0.70.0.80.0.90.0.100.0.110.0.12
npm@ornikar/react-modern-calendar-datepicker
3.2.13.2.23.2.33.2.43.2.53.2.63.2.73.2.83.2.93.2.103.2.11
npm@ornikar/react-native-svg-transformer
1.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.13
npm@ornikar/renovate-config
9.0.29.0.39.0.49.0.59.0.69.0.79.0.89.0.99.0.109.0.119.0.129.0.13
npm@ornikar/repo-config
15.3.315.3.415.3.515.3.615.3.715.3.815.3.915.3.1015.3.1115.3.1215.3.13
npm@ornikar/repo-config-react
13.0.813.0.913.0.1013.0.1113.0.1213.0.1313.0.1413.0.1513.0.1613.0.1713.0.1813.0.19
npm@ornikar/repo-config-react-legacy-css
15.1.215.1.315.1.415.1.515.1.615.1.715.1.815.1.915.1.1015.1.1115.1.1215.1.13
npm@ornikar/rollup-config
11.1.211.1.311.1.411.1.511.1.611.1.711.1.811.1.911.1.1011.1.1111.1.1211.1.13
npm@ornikar/rollup-plugin-postcss
2.0.52.0.62.0.72.0.82.0.92.0.102.0.112.0.122.0.132.0.142.0.15
npm@ornikar/slate-react-fork
1.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.11
npm@ornikar/storybook-config
12.1.212.1.312.1.412.1.512.1.612.1.712.1.812.1.912.1.10
npm@ornikar/stylelint-config
14.0.314.0.414.0.514.0.614.0.714.0.814.0.914.0.1014.0.1114.0.1214.0.13
npm@ornikar/typed-css-modules-loader
0.8.20.8.30.8.40.8.50.8.60.8.70.8.80.8.90.8.100.8.110.8.12
npm@ornikar/webpack-config
12.0.212.0.312.0.412.0.512.0.612.0.712.0.812.0.912.0.1012.0.1112.0.12
npm@picsart/ai-sdk
3.32.2
npm@picsart/gen-ai
2.55.11
npm@qlik/api
2.14.2
npm@qlik/browserslist-config
3.0.2
npm@qlik/carbon-core
2.1.1
npm@qlik/carboncopy
1.1.6
npm@qlik/design-tokens
1.3.13
npm@qlik/dts-bundler
2.0.3
npm@qlik/embed-react
2.5.3
npm@qlik/embed-runtime
1.6.4
npm@qlik/embed-svelte
1.1.4
npm@qlik/embed-web-components
1.7.3
npm@qlik/eslint-config
2.0.20
npm@qlik/eslint-config-base
0.1.1
npm@qlik/eslint-config-react
0.1.1
npm@qlik/eslint-config-svelte
0.1.1
npm@qlik/eslint-config-vue
0.1.1
npm@qlik/nebula-table-utils
2.6.9
npm@qlik/oxfmt-config
0.1.6
npm@qlik/oxlint-config
0.7.2
npm@qlik/prettier-config
1.0.3
npm@qlik/react-native-simple-grid
1.5.5
npm@qlik/runtime-module-loader
1.5.1
npm@qlik/sdk
0.28.1
npm@qlik/sprout-design-docs
1.0.2
npm@qlik/sprout-gesture
0.0.13
npm@qlik/sprout-icons
0.12.3
npm@qlik/sprout-react
6.45.3
npm@qlik/sprout-react-table
0.16.7
npm@qlik/tsconfig
1.0.3
npm@servicetitan/acquisition-functions
5.22.15.22.25.22.35.22.45.22.55.22.65.22.7
npm@servicetitan/admin-layout
2.4.32.4.42.4.52.4.62.4.72.4.82.4.9
npm@servicetitan/admin-sql-table
1.0.141.0.151.0.161.0.171.0.181.0.191.0.20
npm@servicetitan/ajax-handlers
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/anvil-css-utilities
14.5.414.5.514.5.614.5.714.5.814.5.914.5.10
npm@servicetitan/anvil-fonts
14.5.414.5.514.5.614.5.714.5.814.5.914.5.10
npm@servicetitan/anvil-icon
0.5.10.5.20.5.30.5.40.5.50.5.60.5.7
npm@servicetitan/anvil-icons
14.5.414.5.514.5.614.5.714.5.814.5.914.5.10
npm@servicetitan/anvil-react
0.11.30.11.40.11.50.11.60.11.70.11.80.11.9
npm@servicetitan/anvil-themes
14.5.414.5.514.5.614.5.714.5.814.5.914.5.10
npm@servicetitan/anvil-token
0.4.10.4.20.4.30.4.40.4.50.4.60.4.7
npm@servicetitan/anvil2
3.9.13.9.23.9.33.9.43.9.53.9.63.9.7
npm@servicetitan/anvil2-codemods
0.11.20.11.30.11.40.11.50.11.60.11.70.11.8
npm@servicetitan/anvil2-ext-atlas
4.0.24.0.34.0.44.0.54.0.64.0.74.0.8
npm@servicetitan/anvil2-ext-charts
0.2.40.2.50.2.60.2.70.2.80.2.90.2.10
npm@servicetitan/anvil2-ext-common
0.7.10.7.20.7.30.7.40.7.50.7.60.7.7
npm@servicetitan/anvil2-ext-mwv
0.0.50.0.60.0.70.0.80.0.90.0.100.0.11
npm@servicetitan/anvil2-illustrations
1.0.21.0.31.0.41.0.51.0.61.0.71.0.8
npm@servicetitan/anvil2-mcp
0.0.90.0.100.0.110.0.120.0.130.0.140.0.15
npm@servicetitan/assist-ui
2.1.12.1.22.1.32.1.42.1.52.1.62.1.7
npm@servicetitan/assist-utils
1.1.21.1.31.1.41.1.51.1.61.1.71.1.8
npm@servicetitan/carto-charts-core
0.0.20.0.30.0.40.0.50.0.60.0.70.0.8
npm@servicetitan/carto-charts-react
0.0.20.0.30.0.40.0.50.0.60.0.70.0.8
npm@servicetitan/carto-charts-rn
0.0.20.0.30.0.40.0.50.0.60.0.70.0.8
npm@servicetitan/carto-react-kit
0.8.40.8.50.8.60.8.70.8.80.8.90.8.10
npm@servicetitan/carto-rn-kit
0.0.100.0.110.0.120.0.130.0.140.0.150.0.16
npm@servicetitan/carto-tokens
0.3.10.3.20.3.30.3.40.3.50.3.60.3.7
npm@servicetitan/component-usage
28.5.128.5.228.5.328.5.428.5.528.5.628.5.7
npm@servicetitan/confirm
41.3.141.3.241.3.341.3.441.3.541.3.641.3.7
npm@servicetitan/confirm-navigation
41.3.141.3.241.3.341.3.441.3.541.3.641.3.7
npm@servicetitan/contentful
0.0.30.0.40.0.50.0.60.0.70.0.80.0.9
npm@servicetitan/contentful-proxy
1.1.121.1.131.1.141.1.151.1.161.1.171.1.18
npm@servicetitan/cp-api
1.115.11.115.21.115.31.115.41.115.51.115.61.115.7
npm@servicetitan/cp-mfe
1.115.11.115.21.115.31.115.41.115.51.115.61.115.7
npm@servicetitan/cp-mfe-dev
1.115.11.115.21.115.31.115.41.115.51.115.61.115.7
npm@servicetitan/cp-react-hooks
1.115.11.115.21.115.31.115.41.115.51.115.61.115.7
npm@servicetitan/cp-ui
1.115.11.115.21.115.31.115.41.115.51.115.61.115.7
npm@servicetitan/culture
41.3.141.3.241.3.341.3.441.3.541.3.641.3.7
npm@servicetitan/data-query
41.3.141.3.241.3.341.3.441.3.541.3.641.3.7
npm@servicetitan/datadog-rum
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/datetime-utils
41.3.141.3.241.3.341.3.441.3.541.3.641.3.7
npm@servicetitan/design-system
14.5.414.5.514.5.614.5.714.5.814.5.914.5.10
npm@servicetitan/docs-anvil-uikit-contrib
41.3.141.3.241.3.341.3.441.3.541.3.641.3.7
npm@servicetitan/docs-uikit
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/document-title
2.4.12.4.22.4.32.4.42.4.52.4.62.4.7
npm@servicetitan/dte-pdf-editor
1.76.11.76.21.76.31.76.41.76.51.76.61.76.7
npm@servicetitan/dte-unlayer
0.150.10.150.20.150.30.150.40.150.50.150.60.150.7
npm@servicetitan/eh-module-communication
0.2.10.2.20.2.30.2.40.2.50.2.60.2.7
npm@servicetitan/error-boundary
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/eslint-config
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/eslint-plugin
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/eslint-plugin-decorators-declare
12.8.1512.8.1612.8.1712.8.1812.8.1912.8.2012.8.21
npm@servicetitan/eslint-plugin-folder-schema
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/eslint-plugin-mobx-6
12.8.1512.8.1612.8.1712.8.1812.8.1912.8.20
npm@servicetitan/eslint-plugin-processors-stub
12.8.1512.8.1612.8.1712.8.1812.8.1912.8.2012.8.21
npm@servicetitan/examples
1.2.51.2.61.2.71.2.81.2.91.2.101.2.11
npm@servicetitan/feature-spotlight
3.9.13.9.23.9.33.9.43.9.53.9.63.9.7
npm@servicetitan/folder-lint
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/forge
0.5.10.5.20.5.30.5.40.5.50.5.60.5.7
npm@servicetitan/form
41.3.141.3.241.3.341.3.441.3.541.3.641.3.7
npm@servicetitan/form-state
41.3.141.3.241.3.341.3.441.3.541.3.641.3.7
npm@servicetitan/grid
0.0.630.0.640.0.650.0.660.0.670.0.680.0.69
npm@servicetitan/hammer-icon
1.2.11.2.21.2.31.2.41.2.51.2.61.2.7
npm@servicetitan/hammer-react
1.42.21.42.31.42.41.42.51.42.61.42.71.42.8
npm@servicetitan/hammer-token
3.1.13.1.23.1.33.1.43.1.53.1.63.1.7
npm@servicetitan/hash-browser-router
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/help-center
1.0.81.0.91.0.101.0.111.0.121.0.131.0.14
npm@servicetitan/html-sketchapp
4.2.84.2.94.2.104.2.114.2.124.2.134.2.14
npm@servicetitan/install
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/intl
7.2.17.2.27.2.37.2.47.2.57.2.67.2.7
npm@servicetitan/json-render-react
0.4.60.4.70.4.80.4.90.4.100.4.110.4.12
npm@servicetitan/kendo-theme
0.0.270.0.280.0.290.0.300.0.310.0.320.0.33
npm@servicetitan/ko-bridge
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/launchdarkly-service
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/lazy-module
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/ld-type-generator
0.2.10.2.20.2.30.2.40.2.50.2.60.2.7
npm@servicetitan/line-item-editor
1.5.11.5.21.5.31.5.41.5.51.5.61.5.7
npm@servicetitan/link-item
41.3.141.3.241.3.341.3.441.3.541.3.641.3.7
npm@servicetitan/log-service
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/marketing-direct-mail-components
20.1.120.1.220.1.320.1.420.1.520.1.620.1.7
npm@servicetitan/marketing-email-components
20.2.320.2.420.2.520.2.620.2.720.2.820.2.9
npm@servicetitan/marketing-form
0.1.20.1.30.1.40.1.50.1.60.1.70.1.8
npm@servicetitan/marketing-global-route
1.14.11.14.21.14.31.14.41.14.51.14.61.14.7
npm@servicetitan/marketing-integration-widgets
1.0.401.0.411.0.421.0.431.0.441.0.451.0.46
npm@servicetitan/marketing-route
1.2.11.2.21.2.31.2.41.2.51.2.61.2.7
npm@servicetitan/marketing-ui
9.3.19.3.29.3.39.3.49.3.59.3.69.3.7
npm@servicetitan/marketing-widgets
1.0.11.0.21.0.31.0.41.0.51.0.61.0.7
npm@servicetitan/measure-sheet-data
2.6.12.6.22.6.32.6.42.6.52.6.62.6.7
npm@servicetitan/mfe-quick-actions
0.5.490.5.500.5.510.5.520.5.530.5.540.5.55
npm@servicetitan/micro-frontend
0.0.40.0.50.0.60.0.70.0.80.0.90.0.10
npm@servicetitan/microfront
0.0.20.0.30.0.40.0.50.0.60.0.70.0.8
npm@servicetitan/microfront-auth
0.0.50.0.60.0.70.0.80.0.90.0.100.0.11
npm@servicetitan/microfront-tests
0.0.110.0.120.0.130.0.140.0.150.0.160.0.17
npm@servicetitan/microfront-utils
1.4.11.4.21.4.31.4.41.4.51.4.61.4.7
npm@servicetitan/modularpayments-webfields
1.0.531.0.541.0.551.0.561.0.571.0.581.0.59
npm@servicetitan/moneyout-api-client
1.29.11.29.21.29.31.29.41.29.51.29.61.29.7
npm@servicetitan/mpa-components
2.5.12.5.22.5.32.5.42.5.52.5.62.5.7
npm@servicetitan/navigation
14.1.114.1.214.1.314.1.414.1.514.1.614.1.7
npm@servicetitan/notifications
41.3.141.3.241.3.341.3.441.3.541.3.641.3.7
npm@servicetitan/onboarding-ui
18.5.118.5.218.5.318.5.418.5.518.5.618.5.7
npm@servicetitan/quick-actions
1.15.21.15.31.15.41.15.51.15.61.15.71.15.8
npm@servicetitan/react-hooks
7.7.17.7.27.7.37.7.47.7.57.7.67.7.7
npm@servicetitan/react-ioc
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/responsive
6.1.16.1.26.1.36.1.46.1.56.1.66.1.7
npm@servicetitan/restrict-imports
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/schema-comparison
0.1.30.1.40.1.50.1.60.1.70.1.80.1.9
npm@servicetitan/skeleton
9.2.49.2.59.2.69.2.79.2.89.2.99.2.10
npm@servicetitan/standalone-core-feature-gates
1.11.41.11.51.11.61.11.71.11.81.11.91.11.10
npm@servicetitan/standalone-feature-flags
2.3.22.3.32.3.42.3.52.3.62.3.72.3.8
npm@servicetitan/standalone-root
1.11.31.11.41.11.51.11.61.11.71.11.81.11.9
npm@servicetitan/standalone-tm-api
1.1.11.1.21.1.31.1.41.1.51.1.61.1.7
npm@servicetitan/standalone-ui
2.2.42.2.52.2.62.2.72.2.82.2.92.2.10
npm@servicetitan/startup
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/startup-jest
2.2.12.2.22.2.32.2.42.2.52.2.62.2.7
npm@servicetitan/startup-mfe-compat
0.5.10.5.20.5.30.5.40.5.50.5.60.5.7
npm@servicetitan/startup-utils
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/stylelint-config
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/suppress-warnings
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/table
41.3.141.3.241.3.341.3.441.3.541.3.641.3.7
npm@servicetitan/tanstack-query-mobx
6.2.16.2.26.2.36.2.46.2.56.2.66.2.7
npm@servicetitan/temporal-lite
3.4.13.4.23.4.33.4.43.4.53.4.63.4.7
npm@servicetitan/testing-library
6.6.16.6.26.6.36.6.46.6.56.6.66.6.7
npm@servicetitan/thoughtspot-theme
1.7.11.7.21.7.31.7.41.7.51.7.61.7.7
npm@servicetitan/time-zones
3.8.13.8.23.8.33.8.43.8.53.8.63.8.7
npm@servicetitan/titan-chat-ui
7.1.37.1.47.1.57.1.67.1.77.1.87.1.9
npm@servicetitan/titan-chat-ui-anvil2
9.0.19.0.29.0.39.0.49.0.59.0.69.0.7
npm@servicetitan/titan-chat-ui-common
9.0.19.0.29.0.39.0.49.0.59.0.69.0.7
npm@servicetitan/titan-chat-ui-cypress
2.1.32.1.42.1.52.1.62.1.72.1.82.1.9
npm@servicetitan/titan-chatbot-api
9.0.19.0.29.0.39.0.49.0.59.0.69.0.7
npm@servicetitan/titan-chatbot-client
2.1.32.1.42.1.52.1.62.1.72.1.82.1.9
npm@servicetitan/titan-chatbot-ui
7.1.37.1.47.1.57.1.67.1.77.1.87.1.9
npm@servicetitan/titan-chatbot-ui-anvil2
9.0.19.0.29.0.39.0.49.0.59.0.69.0.7
npm@servicetitan/titan-chatbot-ui-cypress
9.0.19.0.29.0.39.0.49.0.59.0.69.0.7
npm@servicetitan/tokens
12.9.112.9.212.9.312.9.412.9.512.9.612.9.7
npm@servicetitan/toolbelt-shared-registry
1.14.11.14.21.14.31.14.41.14.51.14.61.14.7
npm@servicetitan/uikit-docs
22.11.122.11.222.11.322.11.422.11.522.11.622.11.7
npm@servicetitan/unit-tests
0.0.20.0.30.0.40.0.50.0.60.0.70.0.8
npm@servicetitan/va-mfe-loader
1.1.11.1.21.1.31.1.41.1.51.1.61.1.7
npm@servicetitan/web-components
38.1.138.1.238.1.338.1.438.1.538.1.638.1.7
npm@servicetitan/widget-platform
5.6.15.6.25.6.35.6.45.6.55.6.65.6.7
npm@servicetitan/widget-platform-monolith
5.6.15.6.25.6.35.6.45.6.55.6.65.6.7
npm@thiennq/docs-viewer
1.6.21.6.31.6.4
npm@umacloud/cli-darwin-arm64
1.0.74
npm@umacloud/cli-darwin-x64
1.0.74
npm@umacloud/cli-linux-arm64
1.0.74
npm@umacloud/cli-linux-musl-arm64
1.0.74
npm@umacloud/cli-linux-musl-x64
1.0.74
npm@umacloud/cli-linux-x64
1.0.74
npm@umacloud/cli-win32-x64
1.0.74
npm@umacloud/knowledge
1.0.74
npm@workbench-stack/core
3.9.8
npmbabel-plugin-linaria-css-to-undefined
0.3.10.3.20.3.30.3.40.3.50.3.60.3.70.3.80.3.90.3.100.3.110.3.120.3.130.3.140.3.150.3.160.3.17
npmcache-manager
7.2.10
npmcacheable
2.5.1
npmcacheable-request
13.0.20
npmconv-context-next
1.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.10
npmecto
5.0.1
npmeditable-contracts
0.0.120.0.130.0.140.0.150.0.160.0.170.0.180.0.190.0.200.0.210.0.220.0.230.0.240.0.250.0.260.0.27
npmeslint-plugin-folder-schema
1.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.131.0.141.0.151.0.161.0.171.0.181.0.191.0.201.0.21
npmexample-js-project
1.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.11
npmfile-entry-cache
11.1.6
npmflat-cache
6.1.24
npmfolder-lint
1.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.131.0.141.0.151.0.161.0.171.0.181.0.191.0.201.0.21
npmfrontend-orb
4.4.14.4.24.4.34.4.44.4.54.4.64.4.74.4.84.4.94.4.104.4.114.4.124.4.134.4.144.4.154.4.164.4.174.4.18
npmhamus.js
0.4.1
npmhttp-metrics-middleware
2.2.2
npmkeyv
6.0.0
npmnative-frontend-orb
1.1.41.1.51.1.61.1.71.1.81.1.91.1.101.1.111.1.121.1.131.1.141.1.151.1.161.1.171.1.181.1.19
npmpicasso-plugin-hammer
2.11.6
npmpicasso-plugin-q
2.11.6
npmpicasso.js
2.11.6
npmpob-test-package-in-monorepo
5.2.15.2.25.2.35.2.45.2.55.2.65.2.75.2.85.2.95.2.105.2.115.2.125.2.135.2.145.2.155.2.16
npmpob-test-typescript-package-in-monorepo
4.2.14.2.24.2.34.2.44.2.54.2.64.2.74.2.84.2.94.2.104.2.114.2.124.2.134.2.144.2.154.2.164.2.17
npmqlik-chart-modules
1.1.1
npmqlik-modifiers
0.10.1
npmqlik-object-conversion
0.17.2
npmrwc-client
0.29.100.29.110.29.120.29.130.29.140.29.150.29.160.29.170.29.180.29.19
npmserver-hemera-mongo
0.0.12
npmsn-listbox
0.3.3
npmtslint-folder-schema
1.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.131.0.141.0.151.0.161.0.171.0.181.0.191.0.201.0.21
npmumadev
1.0.74
npmverdaccio-okta-oauth
38.1.138.1.238.1.338.1.438.1.538.1.638.1.738.1.838.1.938.1.1038.1.1138.1.1238.1.1338.1.1438.1.1538.1.16
npmverdaccio-tarball-local-storage
38.1.138.1.238.1.338.1.438.1.538.1.638.1.738.1.838.1.938.1.1038.1.1138.1.1238.1.1338.1.1438.1.1538.1.16
npmworkbench-browser-server
0.0.2
npm-2026-08-04-shai-hulud-keyv-cacheableSource advisory
Critical4 Aug 2026
1 package tracked
GitHub Advisory npm CWE-506 sweep - 1-package 2026-08-04 batch (`internallib_v688` third-day continuation of the `internallib_v<NNN>` sequential dep-confusion enumeration campaign)
GHSA published 1 npm CWE-506 advisory dated 2026-08-04: internallib_v688 (>= 0) - a third-day continuation of the internallib_v<NNN> sequential dep-confusion enumeration campaign that dropped internallib_v524 and internallib_v568 on 2026-08-03. The internallib_ prefix explicitly probes for internal-package name collisions on any org that publishes internallib_* internal libraries.
npm
Affected packages1 package · 1 version
npminternallib_v688
1.0.0
npm-2026-08-04-ghsa-malware-sweepSource advisory
Critical4 Aug 2026
4 packages tracked
GitHub Advisory PyPI CWE-506 sweep - 4-package 2026-08-04 batch (Bitcoin hardware-wallet infostealer cluster `2026-08-coldcard-helpers` + `2026-08-psbt-utils`, plus 1 pentest kit)
GHSA published 4 PyPI CWE-506 advisories dated 2026-08-04: three Bitcoin hardware-wallet infostealers - coldcard-helpers, psbt-helpers, psbt-utils (Coldcard + PSBT Partially Signed Bitcoin Transaction targeting under campaigns 2026-08-coldcard-helpers / 2026-08-psbt-utils) - and a fourth pentest-flagged host-recon kit launchdarkly-ai-server-sdk.
PyPI
Affected packages4 packages · 15 versions
PyPIcoldcard-helpers
1.4.2
PyPIlaunchdarkly-ai-server-sdk
1.0.11.0.21.1.01.2.01.3.01.4.01.5.01.6.01.7.01.8.01.9.01.9.9
PyPIpsbt-helpers
1.0.0
PyPIpsbt-utils
1.0.0
pypi-2026-08-04-ghsa-malware-sweepSource advisory
Critical3 Aug 2026
17 packages tracked
GitHub Advisory npm CWE-506 sweep - 18-package 2026-08-03 batch (`@types-beta/sdk@0.1.0-0.1.3` `@types`-namespace impersonation with Windows `nanocache.exe` WinHTTP-WebSocket RAT, 5-package `beaver-ui-*` component-library burst, `internallib_v524`/`v568` sequential dep-confusion continuation, `simple-date-formatter-new-1`/`-util-5` OpenSSF-PA C2 + command-execution pair, `tailwind-anim` Tailwind-ecosystem typosquat second-day companion, `@custombots/custombot@1.0.0` OpenSSF-PA malicious-command scoped RAT, and 5-package internal-tooling dep-confusion singleton burst)
GHSA published 18 npm CWE-506 advisories dated 2026-08-03. Most severe: @types-beta/sdk@0.1.0-0.1.3 - a @types-namespace impersonation embedding a Windows nanocache.exe WinHTTP WebSocket RAT. Batch also includes a 5-package beaver-ui-* dep-confusion burst, internallib_v524/v568 continuation, simple-date-formatter-* OpenSSF-PA C2+cmd pair, tailwind-anim, and 5 more.
npm
Affected packages17 packages · 20 versions
npm@custombots/custombot
1.0.0
npm@types-beta/sdk
0.1.00.1.10.1.20.1.3
npmaccounts-final-form
1.0.0
npmaccounts-loading-state
1.0.0
npmbeaver-ui-date-range-picker
1.0.0
npmbeaver-ui-grid
1.0.0
npmbeaver-ui-header
1.0.0
npmbeaver-ui-items-with-more
1.0.0
npmbeaver-ui-layout
1.0.0
npmbigops-chat-messages
1.0.0
npmfluid-type-ui
1.0.0
npminternallib_v524
1.0.0
npminternallib_v568
1.0.0
npmlifestyle-test-utils
1.0.0
npmsimple-date-formatter-new-1
1.0.0
npmsimple-date-formatter-util-5
1.0.0
npmtailwind-anim
1.0.0
npm-2026-08-03-ghsa-malware-sweepSource advisory
Critical3 Aug 2026
1 package tracked
GitHub Advisory PyPI CWE-506 sweep - 1-package 2026-08-03 batch (`instalogin1234@0.0.1` Instagram credential-harvester with Discord exfil, campaign `2026-08-instalogin1234`)
GHSA published 1 PyPI CWE-506 advisory dated 2026-08-03: instalogin1234@0.0.1 - masquerades as an Instagram CLI tool, captures user login credentials, exfiltrates them to a Discord channel, and opens the legitimate Instagram website in the browser to hide the theft. Attributed to campaign 2026-08-instalogin1234 in the OpenSSF malicious-packages repository.
PyPI
Affected packages1 package · 1 version
PyPIinstalogin1234
0.0.1
pypi-2026-08-03-ghsa-malware-sweepSource advisory
Critical2 Aug 2026
8 packages tracked
GitHub Advisory npm CWE-506 sweep - 8-package 2026-08-02 batch (`houzidawang806/807/808` sequential-namespace trio, `simple-date-formatter-util`/`-1`/`-2` date-util trio, `tailwindcss-anim` Tailwind-ecosystem typosquat, `list-issue-predecessor-dependencies-block@99.0.0` OpenSSF-PA C2-domain communicator with dep-confusion inflated pin)
GHSA published 8 npm CWE-506 advisories dated 2026-08-02 - a houzidawang806/807/808 sequential-namespace trio, a simple-date-formatter-util + -1 + -2 date-utility trio, tailwindcss-anim under the Tailwind CSS ecosystem name shape, and list-issue-predecessor-dependencies-block@99.0.0 flagged by OpenSSF Package Analysis for both malicious-domain communication AND malicious-command execution with the extreme-inflated dep-confusion pin (99.0.0).
npm
Affected packages8 packages · 8 versions
npmhouzidawang806
1.0.0
npmhouzidawang807
1.0.0
npmhouzidawang808
1.0.0
npmlist-issue-predecessor-dependencies-block
99.0.0
npmsimple-date-formatter-util
1.0.0
npmsimple-date-formatter-util-1
1.0.0
npmsimple-date-formatter-util-2
1.0.0
npmtailwindcss-anim
1.0.0
npm-2026-08-02-ghsa-malware-sweepSource advisory
Critical2 Aug 2026
2 packages tracked
GitHub Advisory PyPI CWE-506 sweep - 2-package 2026-08-02 batch (`trongriden@0.0.1` Tron/TRX cryptocurrency private-key exfiltration under the long-running `2025-04-tronix` campaign, `wacve-utils@1.0.7` Linux + Android/Termux encrypted infostealer with Telegram exfil)
GHSA published 2 PyPI CWE-506 advisories dated 2026-08-02: trongriden@0.0.1 - Tron/TRX cryptocurrency private-key exfiltration marked as part of the long-running 2025-04-tronix campaign - and wacve-utils@1.0.7, an encrypted infostealer targeting Linux and Android execution under Termux with file system / browser / SMS collection routed to a Telegram channel and remote-script download for dynamic payload updates.
PyPI
Affected packages2 packages · 2 versions
PyPItrongriden
0.0.1
PyPIwacve-utils
1.0.7
pypi-2026-08-02-ghsa-malware-sweepSource advisory
Critical1 Aug 2026
10 packages tracked
GitHub Advisory npm CWE-506 sweep - 10-package 2026-08-01 batch (`test-dev-*` 8-package sequential-namespace burst, `@moxfive-llc/common` scoped RAT, `pp-react-worldready` OpenSSF-PA C2 domain communicator)
GHSA published 10 npm CWE-506 advisories dated 2026-08-01 - an 8-package test-dev-* sequential-namespace burst (test-dev-boot, -host, -watch, -sync, -dispatch, -exec, -store, -link), a @moxfive-llc/common scoped RAT publish, and pp-react-worldready@1.0.0 flagged by OpenSSF Package Analysis for communicating with a domain associated with malicious activity.
npm
Affected packages10 packages · 10 versions
npm@moxfive-llc/common
1.0.0
npmpp-react-worldready
1.0.0
npmtest-dev-boot
1.0.0
npmtest-dev-dispatch
1.0.0
npmtest-dev-exec
1.0.0
npmtest-dev-host
1.0.0
npmtest-dev-link
1.0.0
npmtest-dev-store
1.0.0
npmtest-dev-sync
1.0.0
npmtest-dev-watch
1.0.0
npm-2026-08-01-ghsa-malware-sweepSource advisory
Critical1 Aug 2026
7 packages tracked
GitHub Advisory PyPI CWE-506 sweep - 7-package 2026-08-01 batch (`asdk-plugin-*` 3-package dep-confusion trio at `0.0.1`/`9999.0.0`, `walmart-genai-trace` dep-confusion probe, `telerape` PTH-file reverse-shell, `nvtorch-oot-nightly`/`trtllm-subdir-test` NVIDIA-adjacent dep-confusion probe pair at `99999.0.0`/`99999.0.1`)
GHSA published 7 PyPI CWE-506 advisories 2026-08-01: asdk-plugin-alphagen/-legacy/-ai-platform (dep-confusion trio at 0.0.1 + 9999.0.0), walmart-genai-trace (Walmart internal GenAI namespace probe), telerape (PTH-file reverse-shell persistence), and nvtorch-oot-nightly + trtllm-subdir-test (NVIDIA-adjacent dep-confusion probe pair at 99999.0.0/99999.0.1 targeting torch-oot-nightly and TensorRT-LLM subdir internal namespaces).
PyPI
Affected packages7 packages · 15 versions
PyPIasdk-plugin-ai-platform
0.0.19999.0.0
PyPIasdk-plugin-alphagen
0.0.19999.0.0
PyPIasdk-plugin-legacy
0.0.19999.0.0
PyPInvtorch-oot-nightly
99999.0.099999.0.1
PyPItelerape
0.0.0.dev01.0.01.0.1
PyPItrtllm-subdir-test
99999.0.099999.0.1
PyPIwalmart-genai-trace
0.0.199.0.0
pypi-2026-08-01-ghsa-malware-sweepSource advisory
Critical31 Jul 2026
92 packages tracked
GitHub Advisory npm CWE-506 sweep - 91-package 2026-07-30/07-31 batch (`@peptide-packets` biotech scope pair, socket.io/mongoose/passport typosquat burst, ethers.js/rlp/fs-extra impersonator kit, `nano-perf` postinstall daemon C2, late-07-31 MCP-namespace burst, `@0xlr` dep-confusion PoC scope, `@spending-behavior-ui`/`@finance-ui`/`@mplay-*`/`@sof-assistant-*` enterprise dep-confusion sweep, `rollup-plugin-polyfill-hold`/`-helper` pair, `paraglide-js@1.0.1` takeover-style drop)
GHSA published 91 npm CWE-506 advisories 2026-07-30–07-31: existing 25-pkg batch (@peptide-packets, socket.io/mongoose/passport typos, ethers/rlp/fs-extra, nano-perf C2) plus a late-07-31 66-pkg wave - MCP-namespace burst (13), @0xlr dep-confusion PoC scope (10), enterprise internal-scope dep-confusion sweep (15 scoped pkgs), broad unscoped typosquats (25), rollup-plugin-polyfill-hold/-helper pair, paraglide-js@1.0.1 takeover.
npm
Affected packages92 packages · 92 versions
npm@0xlr/clerk-auth
1.0.0
npm@0xlr/dep-confusion-poc
1.0.0
npm@0xlr/prisma-client-js
1.0.0
npm@0xlr/question-types
1.0.0
npm@0xlr/sentry-web
1.0.0
npm@0xlr/stripe-checkout-js
1.0.0
npm@0xlr/stripe-frontend
1.0.0
npm@0xlr/supabase-db
1.0.0
npm@0xlr/test-callback
1.0.0
npm@0xlr/vercel-analytics
1.0.0
npm@404c3s4r/lodash
1.0.0
npm@cr-invested-ui-components/chart
1.0.0
npm@dexwilt/node-fetch
2.7.3
npm@finance-ui/finance-view
1.0.0
npm@finance-ui/snackbar-ifpe
1.0.0
npm@fuji-web-components/maps
1.0.0
npm@global-theme/context
1.0.0
npm@meli-testing/jest-react
1.0.0
npm@mp-op-ss-front-lib/tracks
1.0.0
npm@mplay-core-lib/utilities
1.0.0
npm@mplay-frontend-ui/link
1.0.0
npm@nordic-dev/linting-tools
1.0.0
npm@one-chat/react
1.0.0
npm@peptide-packets/js-unimode
1.0.0
npm@peptide-packets/peptide-modify
1.0.0
npm@sof-assistant-fe-lib/vertical-faqs
1.0.0
npm@spending-behavior-ui/cashflow-widget
1.0.0
npm@spending-behavior-ui/widget-insights
1.0.0
npm@sudoughnym/enviro-demo
1.0.0
npm@sw-commons-components/message-upsell
1.0.0
npmadpanel-core
1.0.0
npmai-backup-script
1.0.0
npmallurectl
1.0.0
npmasdsafsadad
1.0.0
npmasdsafsafdasdsaasdasda
1.0.0
npmattio-discover
1.0.0
npmcapacitor-assets
1.0.0
npmchaos-mcp
1.0.0
npmcommunity-published
1.0.0
npmcreate-remotion
1.0.0
npmeth-bridge
1.0.0
npmethe.json
1.0.0
npmethers.json
1.0.0
npmethersss
1.0.0
npmfast-csv-helper
1.0.0
npmfrontend-regulations
1.0.0
npmfs-extra-master
1.0.0
npmfsextrra
1.0.0
npmgoldenflow-js
1.0.0
npmgtm-mcp-auth
1.0.0
npmhazmat-cfr
1.0.0
npmhit-mcp
1.0.0
npmiac-scanner
1.0.0
npminstall-native-host
1.0.0
npmiwomm-mcp
1.0.0
npmkelly-stake
1.0.0
npmkip-mcp-http
1.0.0
npmmaximumsats-mcp
1.0.0
npmmcp-server-boilerplate
1.0.0
npmmetrics-ui
1.0.0
npmmongostose
1.0.0
npmmoontose
1.0.0
npmnano-perf
2.2.0
npmnode-fs-extra-master
1.0.0
npmnotifications-broadcast
1.0.0
npmparaglide-js
1.0.1
npmpasssport1
1.0.0
npmpasstpor
1.0.0
npmpm-claude-skills-mcp
1.0.0
npmpolylabel-web-lib
1.0.0
npmpolyprompt
1.0.0
npmportway
1.0.0
npmprocess-status-widget
1.0.0
npmreact-hot-svg
1.0.0
npmredis-type-xyz
1.10.6
npmrefbase-mcp
1.0.0
npmrlp-master
1.0.0
npmrlp.git
1.0.0
npmrollup-plugin-polyfill-helper
1.0.0
npmrollup-plugin-polyfill-hold
1.0.0
npmrouterbase-mcp
1.0.0
npmsap-mcp-config
1.0.0
npmsap-mcp-facilitator
1.0.0
npmscketio
1.0.0
npmsmart-npv-mcp
1.0.0
npmsoccketio
1.0.0
npmsocketi
1.0.0
npmsocktio
1.0.0
npmsso-users-detection
1.0.0
npmvcse
1.0.0
npmvite-config-svg
1.0.0
npmvite-tsconfig-svg
1.0.0
npm-2026-07-31-ghsa-malware-sweepSource advisory
Critical31 Jul 2026
14 packages tracked
GitHub Advisory PyPI CWE-506 sweep - 14-package 2026-07-30/07-31 batch (`ml-*-shared` env-var exfil, `ai-perf-toolkit` + `mcp-search-server` cryptominer pair, `phabricator-client@99.x` dep-confusion, plus late-07-31 `2026-07-cognikit` DPRK Contagious Interview cluster and `reguestsc` salatstealer)
GHSA published 14 PyPI CWE-506 advisories 2026-07-30–07-31: ml-*-shared env-var exfil kit (4 pkgs), ai-perf-toolkit + mcp-search-server cryptominer pair, phabricator-client@99.x dep-confusion, plus late-07-31 DPRK Contagious Interview 2026-07-cognikit cluster (aiprepkit, catalogai, cognikit, aiassistcore, aichannel, ailaunchkit) and reguestsc salatstealer typosquat.
PyPI
Affected packages14 packages · 24 versions
PyPIai-perf-toolkit
2.4.2
PyPIaiassistcore
0.1.2
PyPIaichannel
0.1.2
PyPIailaunchkit
0.1.2
PyPIaiprepkit
0.1.2
PyPIcatalogai
0.1.2
PyPIcognikit
0.1.2
PyPImcp-search-server
1.0.02.0.02.0.1
PyPIml-data-shared
12.0.116.0.1
PyPIml-fdbk-shared
1.0.02.3.1
PyPIml-nps-shared
6.0.38.2.3
PyPIml-shared
6.3.08.8.0
PyPIphabricator-client
99.0.099.0.199.0.299.0.399.0.4
PyPIreguestsc
2.34.2
pypi-2026-07-31-ghsa-malware-sweepSource advisory
Critical30 Jul 2026
28 packages tracked
GitHub Advisory npm CWE-506 sweep - 28-package late 2026-07-29 backfill (`@ai-plus`/`@ai-agent-node` 5-pkg AI-agent SDK cluster, 5-pkg Polymarket / prediction-market impersonator kit, `@peptide-unit` scope pair, 6-pkg Alibaba-adjacent `lzd-*`/`uniapi-*`/`aone-cloud-cli`/`colder-cli`/`lwp-web-client`/`def-open-client` scope, `@zannstore/baileys` 17-version WhatsApp SDK typosquat, misc single-package RATs including `eslintcmd` ESLint typosquat)
GitHub Advisory Database published a further 28 npm CWE-506 advisories dated 2026-07-29 after the prior day's ingest - clusters: @ai-plus/@ai-agent-node 5-pkg AI-agent SDK scopes, 5-pkg Polymarket / prediction-market impersonator kit (polymarket-risk-manager, poly-kelly, ts-precision, ts-bn-proto, stake-math), @peptide-unit pair, 6-pkg Alibaba-adjacent scope, @zannstore/baileys 17-version WhatsApp SDK typosquat.
npm
Affected packages28 packages · 44 versions
npm@ai-agent-node/agent-node
1.0.0
npm@ai-agent-node/createnode
1.0.0
npm@ai-agent-node/nodesql
1.0.0
npm@ai-plus/de-agent
1.0.0
npm@ai-plus/de-agent-sdk
1.0.0
npm@finxsecdemo/utils
1.0.2
npm@omniwatch-wick/cli
1.0.0
npm@peptide-unit/js-unimode
1.0.0
npm@peptide-unit/peptide-modify
1.0.0
npm@zannstore/baileys
2.2.62.2.72.2.82.3.02.3.12.3.22.3.32.3.42.3.52.3.62.3.72.3.92.4.02.4.12.4.22.4.32.4.4
npmaone-cloud-cli
1.0.0
npmcolder-cli
1.0.0
npmdata-parser-utils
1.0.0
npmdef-open-client
1.0.0
npmeslintcmd
1.0.0
npmfeedback-ai-sdk
1.0.0
npmflight-compare-analyzer
1.0.0
npmlwp-web-client
1.0.0
npmlzd-unified-station-sdk
1.0.0
npmopen-worker-cli
1.0.0
npmpoly-kelly
1.0.0
npmpolymarket-risk-manager
1.0.0
npmstake-math
1.0.0
npmtest-skill-zip
1.0.0
npmts-bn-proto
1.0.0
npmts-precision
1.0.0
npmuniapi-bridge
1.0.0
npmzer0code
0.2.0
npm-2026-07-30-ghsa-malware-sweepSource advisory
Critical29 Jul 2026
65 packages tracked
GitHub Advisory npm CWE-506 sweep - 60-package 2026-07-28 → 2026-07-29 backfill (9-package `@wagni_bot/*` Telegram credential-stealer scope, 6-package `2.1.6` postinstall SSH-key + file harvester cluster, 4-package `streak-*` Windows PE binary drop, 3-package `aone-*` embedded-malware trio, `xerohub-discord-voice` Discord-token stealer pair, generic-name C2 domain communicator kit, `@joyfill/*` prerelease pair, misc single-package RATs and typosquats)
GitHub Advisory Database published 6 new npm CWE-506 advisories on 2026-07-29 plus a ~55-package 2026-07-28 backfill. Clusters: @wagni_bot/* 9-pkg Telegram stealer, 2.1.6 SSH-key harvester (app-*-layer, api-*-sdk), streak-* Windows-PE dropper, aone-* all-versions, xerohub-discord-voice token stealer, generic-name C2 kit.
npm
Affected packages65 packages · 77 versions
npm@ai_/autoprefixers
1.2.0
npm@apexfnd/apex
1.0.01.0.1
npm@bowozzz/baileys
1.0.0
npm@crbrc/xbt
1.1.01.1.11.1.21.1.31.1.41.2.1
npm@joyfill/components
4.0.0-rc24-2773-beta.4
npm@joyfill/layouts
0.1.2-2773.beta.0
npm@mypwn/hawkeye
99.0.0
npm@wagni_bot/bsc
1.0.0
npm@wagni_bot/eth
1.0.0
npm@wagni_bot/hyperliquid
1.0.0
npm@wagni_bot/metamask
1.0.0
npm@wagni_bot/opensea
1.0.0
npm@wagni_bot/polygon
1.0.0
npm@wagni_bot/polymarket
1.0.0
npm@wagni_bot/wagni
1.0.0
npm@wagni_bot/web3
1.0.0
npm@yancyyu/agentcli
1.9.32
npmaone-kit
1.0.0
npmaone-kit-cli
1.0.0
npmaone-sandbox
1.0.0
npmapi-node-sdk
2.1.6
npmapi-rust-sdk
2.1.6
npmapp-sim-layer
2.1.6
npmapp-sima-layer
2.1.6
npmapp-soda-layer
2.1.6
npmapp-svm-layer
2.1.6
npmarray-node-utils
1.0.9
npmarray-sort-helper
1.0.0
npmbasic-vite
1.0.0
npmbianira-ui
1.27.0
npmblots
2.1.0
npmchain-analyze
1.0.2
npmchain-manager
1.0.0
npmcloud-config-fetcher
1.0.0
npmcolor-convert-helper
1.0.0
npmdate-sanitize-helper
1.0.0
npmethers-secure
1.0.0
npmfluid-type-ui
2.0.8
npmjobber-app-template-react
1.0.1
npmjson-schema-inspector
1.1.41.1.51.1.61.1.7
npmjson-to-table-util
1.0.0
npmkordyn
0.9.160.9.18
npmkorvica
1.0.0
npmlib-mtop
1.0.0
npmlib-streak-math
1.0.0
npmlocal-config-parser
1.0.0
npmnode-array-plus
1.0.9
npmnum-format-helper
1.0.0
npmparallely
10.0.3
npmpostcss-motion-utils
1.0.0
npmreact-puller
1.0.0
npmrollup-runtime-core-polyfills
0.0.1
npmsigchain-js
1.0.1
npmsimple-probe-utils
1.0.1
npmsmart-config-manager
1.0.0
npmstreak-core-lib
1.0.0
npmstreak-core-math
1.0.0
npmstreak-daily-lib
1.0.0
npmstring-format-kit
1.0.2
npmtext-line-parser
1.0.0
npmtidal-embed-player
1.0.1
npmtoll_free
1.0.1
npmtriage_bot_using_sdkv3
2.0.1
npmxerohub-discord-voice-v2
1.8.0
npmxerohub-discord-voice-v3
3.0.03.0.23.0.3
npm-2026-07-29-ghsa-malware-sweepSource advisory
Critical28 Jul 2026
54 packages tracked
GitHub Advisory npm CWE-506 mega-sweep - 54-package sample from the 2026-07-27 → 2026-07-28 batch (8-package Ethereum-tooling `curl|bash` typosquat cluster, chalk / express / prettier / prisma / dotenv / chai-as-promised typosquat pairs, "helper/utils/tool/pack" credential+wallet-stealer family, 13-package dep-confusion cluster with `999.x` / `19999.x` / `99.99.99` version-inflation, Shai-Hulud-style preinstall Bun stealer resurgence, `@vaultflow/*` 2026-07-28 pair, `claude-code-base-action` Anthropic typosquat)
GitHub Advisory Database published a mega-batch of 250+ new npm CWE-506 malware advisories on 2026-07-27 (spanning 12+ paginated result pages), plus 2 more on 2026-07-28 (@vaultflow/create-flow, @vaultflow/update-flow). This module catalogues 54 non-@antv non-previously-tracked packages from the batch. Notable clusters: 8-package Ethereum-tooling curl|bash operator (web3-core-js, truffle-js, truffle-helper, solc-helper, hardhat-core, ethers-common, ethers-io, cdp-core), typosquat pairs (chalk-*, exxpress-*, prettier-lint-lenz, prisma-callback, env-threads), dep-confusion with inflated version numbers (999.x, 19999.x, 99.99.99), and Shai-Hulud-style preinstall Bun credential stealers on mcp-echarts, mcp-mermaid, ai-figure, gantt-for-react, amapcn, boring-avatars-vanilla, jest-canvas-mock, @cap-js/openapi.
npm
Affected packages54 packages · 125 versions
npm@apps-home-dashboard/events
11.9.011.9.1
npm@cap-js/openapi
1.4.1
npm@citi-icg-158830/elemental-chameleon
0.0.0-defensive-callback0.0.0-defensive-callback.1
npm@convera/ui-shared
0.0.20.0.3
npm@datatrain/passenger-v3
99.99.99
npm@design-system-coopeuch/web
999.0.0999.0.4
npm@pelmnaads/naads-common-logger
19999.0.1
npm@tc-core/campus-service
0.0.0-defensive-callback
npm@vaultflow/create-flow
1.0.0
npm@vaultflow/update-flow
1.0.0
npm@webapp-next/store
91.1.0
npmai-figure
0.5.00.6.0
npmamapcn
0.2.00.2.10.2.20.3.00.3.10.3.2
npmapex-connector
1.0.01.0.11.0.21.0.31.0.4
npmapex-trading
1.0.4
npmboring-avatars-vanilla
1.1.21.2.2
npmbui-react-10components
99.0.0
npmcache-poisoning-pwn-demo
0.1.270.1.280.1.29
npmcdp-core
1.0.41.0.6
npmchai-as-regulated
2.0.102.0.112.0.12
npmchalk-pack
1.0.42.0.0
npmchalk-utils
1.0.31.0.42.0.0
npmcheerio-tool
1.0.31.0.41.0.5
npmclaude-code-base-action
2.0.02.2.2
npmdotenvv-tool
1.0.21.0.31.0.41.0.52.0.0
npmenv-threads
1.5.0
npmethers-common
1.0.02.0.0
npmethers-io
1.0.02.0.0
npmexxpress-tool
1.0.01.0.21.0.5
npmexxpress-utils
1.0.21.0.31.0.52.0.0
npmgantt-for-react
0.3.00.4.0
npmglob-helper
1.0.01.0.11.0.21.0.31.0.41.0.52.0.0
npmhardhat-core
1.0.02.0.0
npmhello-world-pkg-value-value-p
1.0.41.0.11
npmidentitysecuretokenserv
10.0.020.0.0
npmjest-canvas-mock
2.5.32.6.32.7.3
npmjoi-pack
1.0.31.0.41.0.5
npmmcp-echarts
0.8.10.9.1
npmmcp-mermaid
0.5.10.6.1
npmmotion-forge-css
1.0.0
npmnock-helper
1.0.21.0.31.0.41.0.52.0.0
npmnode-ci-utils
2.1.02.1.12.1.22.1.32.1.4
npmpaysafe-gbp-virtual-assistant-lib-fe
2.0.4
npmprettier-lint-lenz
1.0.02.6.4
npmprisma-callback
1.0.01.0.31.0.41.0.5
npmrequest-logger-canary
1.0.0
npmrimraf-utils
1.0.41.0.52.0.0
npmsolc-helper
1.0.02.0.0
npmsysbin
1.0.34
npmtruffle-helper
1.0.02.0.0
npmtruffle-js
1.0.02.0.0
npmtypography-stylecss
0.7.4
npmvue-template-compiler-plugin
2.7.18
npmweb3-core-js
1.0.02.0.0
npm-2026-07-28-ghsa-malware-sweepSource advisory
Critical28 Jul 2026
7 packages tracked
GitHub Advisory PyPI CWE-506 sweep - 7-package 2026-07-28 batch (`karpatkit`/`karpatkey` dep-confusion pair against Karpatkey DAO tooling, `dev-helper-bg` + `cfgzen` infostealer siblings, `mrmustard` Xanadu-quantum-lib typosquat, `vtranalytic` Telegram RAT, `govapkg` fake-Go-doc-client with systemd persistence)
GHSA published 7 new PyPI CWE-506 advisories on 2026-07-28: karpatkit/karpatkey Karpatkey DAO dep-confusion pair, dev-helper-bg + cfgzen infostealer siblings, mrmustard@0.7.4 Xanadu typosquat, vtranalytic@9.0.1 Telegram RAT, govapkg@0.1.0 fake Go doc client with systemd persistence.
PyPI
Affected packages7 packages · 17 versions
PyPIcfgzen
1.0.01.0.11.0.21.0.31.0.41.0.51.0.6
PyPIdev-helper-bg
0.1.30.1.40.1.60.1.7
PyPIgovapkg
0.1.0
PyPIkarpatkey
2.1.1
PyPIkarpatkit
2.1.02.1.1
PyPImrmustard
0.7.4
PyPIvtranalytic
9.0.1
pypi-2026-07-28-ghsa-malware-sweepSource advisory
High27 Jul 2026
46 packages tracked
GitHub Advisory npm CWE-506 sweep - 47-package overnight batch (8-package `thirdweb` / `rainbowkit` crypto-wallet typosquat cluster, 6-package baileys/WhatsApp-scraper `fazz*` + `@vinnxcode` + `sixbails` family, 4-package `log-taker` / `ts-escrow` sibling cluster, 5-package `txs-*` + `chai-log` operator cluster, 3-package `@403name/*` typosquat cluster, 4-package `edu-npm-*` "educational" postinstall family, `@wrenfield/abitype` + `@wrenfield/viem` crypto-SDK typosquats, `@kalipto/local` + `kalipto-runtime`, `@ceeferenderer/*` dep-confusion pair, `ap3-components-ui` v9.999.0 dep-confusion, `permcserver` / `permcarmserver`, plus singletons) retired 2026-07-27 01:02–05:36 UTC
On 2026-07-27 01:02 → 05:36 UTC GitHub retired 47 npm CWE-506 malware advisories in a single overnight batch. Twelve clusters spanning crypto-wallet typosquats (thirdweb / rainbowkit / @wrenfield/viem), WhatsApp-Baileys scrapers (fazz*, @vinnxcode, sixbails, amanexzyra-baileys), dependency-confusion (ap3-components-ui@9.999.0, @ceeferenderer/*), postinstall droppers (txs-*, chai-log, edu-npm-*, @403name/*), plus singletons. All 47 packages security-replaced with 0.0.1-security sentinel tarballs.
npm
Affected packages46 packages · 114 versions
npm@403name/electron-buidler
1.0.01.0.11.0.2
npm@403name/ether-js
1.0.01.0.11.0.2
npm@403name/fsevent
1.0.01.0.11.0.2
npm@ceeferenderer/fe-renderer-sdk
9.9.09.9.999.9.9
npm@ceeferenderer/itg-renderer-sdk
9.9.09.9.999.9.9
npm@ci-lifecycle-test/postinstall-ping
1.0.0
npm@fazzcode/baileys
0.1.10.1.50.1.60.1.72.0.62.4.42.5.32.5.42.5.52.5.62.5.7
npm@kalipto/local
1.0.01.0.11.0.21.0.3
npm@vinnxcode/libsignal-node
1.0.01.0.1
npm@vinnxcode/xbailsync
1.0.01.0.1
npm@wrenfield/abitype
1.2.31.2.41.2.61.2.7
npm@wrenfield/viem
2.53.12.53.22.53.32.53.4
npmamanexzyra-baileys
3.0.04.0.04.0.2
npmap3-components-ui
9.999.0
npmchai-log
1.1.0
npmedu-npm-dependency-chain-demo
1.0.01.0.11.0.21.0.31.0.4
npmedu-npm-helper-alpha
1.0.0
npmedu-npm-helper-beta
1.0.0
npmedu-npm-postinstall-demo2
1.0.01.0.11.0.21.0.3
npmfazzanime
0.3.20.3.30.3.4
npmfazzgram
0.1.00.1.1
npmfluterjs
1.0.0
npmjextic-eclib
1.0.0
npmkalipto-runtime
1.0.0
npmlog-taker
0.0.70.0.80.0.90.1.0
npmlog-taker1
0.1.0
npmnpx-whoami-demo
1.0.0
npmpermcarmserver
1.0.0
npmpermcserver
1.0.01.0.11.0.21.0.31.0.4
npmrainbokit
0.0.8
npmrainbownkit
0.0.8
npmroblox-api-client
1.0.0
npmsixbails
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.1.01.1.11.1.2
npmtherdweb
0.0.8
npmthidweb
0.0.8
npmthirdwb
0.0.8
npmthirdwebb
0.0.8
npmthirdwebjs
0.0.8
npmthurdweb
0.0.8
npmts-escro
0.0.60.0.70.0.80.0.9
npmts-escrow
0.0.90.1.0
npmtxs-builder
1.0.6
npmtxs-random-lib
1.0.1
npmtxs-runner-lib
1.0.1
npmtxs-sdk-lib
1.0.1
npmv018-axios-cdntest
1.0.01.0.11.0.21.0.3
npm-2026-07-27-ghsa-malware-sweepSource advisory
Medium25 Jul 2026
20 packages tracked
GitHub Advisory npm CWE-506 backfill - 19 "John Wick 4" Spanish-SEO-spam autopublisher packages + `-pem-misa` tea.xyz farmer swept 2026-07-25 (all long-unpublished from npm)
On 2026-07-25 GitHub retired 20 npm CWE-506 malware advisories in a historical backfill batch - 19 SEO-spam autopublisher packages named after the 2023 movie "John Wick: Chapter 4" (all originally published 2023-03-23, unpublished 2023-03-27), plus -pem-misa@1.3.3 (published 2024-05-24, part of the Indonesian tea.xyz token-farming autopublisher wave). No credential-stealer or wallet-drain payload - these are token-farming and SEO-spam packages that have been off the public npm registry for 1-3 years.
npm
Affected packages20 packages · 20 versions
npm-accion-pelicula-john-wick-4-keanu-reeves-peliculas-completa-varindo-allah-varindo-en-casa-lliena-
1.0.0
npm-accion-pelicula-john-wick-4-keanu-reeves-peliculas-completa-varindo-h-d-varindo-en-casa-lliena-
1.0.0
npm-espanol-john-wick-keanu-4-k-varindo-en-casa-en-lienia-lliena-love
1.0.0
npm-espanol-john-wick-keanu-reeves-4-k-varindo-en-casa-en-lienia-lliena-love
1.0.0
npm-john-wick-4-keanu-reeves-pelicula-completa-4-k-varindo-en-casa-en-lienia-lliena-love
1.0.0
npm-john-wick-4-keanu-reeves-pelicula-completa-h-d-varindo-en-casa-en-lienia-lliena-love
1.0.0
npm-john-wick-4-keanu-reeves-peliculas-completa-h-d-varindo-en-casa-en-lienia-lliena-love
1.0.0
npm-john-wick-4-keanu-reeves-peliculas-completa-h-d-varindo-en-casa-lliena-espanol
1.0.0
npm-john-wick-4-keanu-reeves-peliculas-completa-h-d-varindo-en-casa-lliena-love
1.0.0
npm-john-wick-4-keanu-reeves-peliculas-completa-varindo-h-d-varindo-en-casa-lliena-
1.0.0
npm-john-wick-4-keanu-reeves-peliculas-completa-varindo-h-d-varindo-en-casa-lliena-espanol
1.0.0
npm-john-wick-4-keanu-reeves-peliculas-completa-varindo-h-d-varindo-en-casa-tarabi-lliena-
1.0.0
npm-john-wick-keanu-4-k-varindo-en-casa-en-lienia-lliena-love
1.0.0
npm-john-wick-keanu-reeves-pelicula-completa-4-k-varindo-en-casa-en-lienia-lliena-
1.0.0
npm-john-wick-keanu-reeves-pelicula-completa-4-k-varindo-en-casa-en-lienia-lliena-love
1.0.0
npm-pem-misa
1.3.3
npm-whare-to-watch-john-wick-chapter-4-2023-fullmovies-hd-online-at-123
1.0.0
npm-whare-to-watch-john-wick-chapter-4-2023-fullmovies-hd-online-at-index-main
1.0.0
npm-whare-to-watch-john-wick-chapter-4-2023-fullmovies-hd-online-at-suparhit
1.0.0
npm-whareo-to-watch-john-wick-chapter-4-2023-fullmovies-hd-online-at-home
1.0.0
npm-2026-07-25-ghsa-tea-xyz-backfillSource advisory
High24 Jul 2026
10 packages tracked
GitHub Advisory malware sweep - 10-package `svelte-*-streak` / `eth-*` typosquat cluster (`eth-base` / `eth-slint` / `eth-codergen` / `streak-lib-math` / `svelte-streak-metrics`), `chai-as-stringify` `chai` v7 typosquat, `svgcraft-core` 8-version dropper, and `yuinpm` 68-version prolific-publisher cluster swept 2026-07-23 late-batch
On 2026-07-23 15:39 → 20:10 UTC GitHub retired 10 additional npm CWE-506 malware advisories in a later batch beyond the earlier 19-package sweep. Five clusters: 4-package streak-* / svelte-*-streak extending the 2026-07-21 wave; 3-package eth-* Ethereum typosquat; chai-as-stringify v7 typosquat; 8-version svgcraft-core dropper; and yuinpm - 68 date-tagged malicious versions.
npm
Affected packages10 packages · 90 versions
npmchai-as-stringify
7.0.17.0.2
npmeth-base
1.0.0
npmeth-codergen
1.0.01.0.11.0.2
npmeth-slint
1.0.0
npmstreak-bucket-lib
1.0.0
npmstreak-lib-math
1.0.0
npmsvelte-goal-streak
1.0.0
npmsvelte-streak-metrics
1.0.0
npmsvgcraft-core
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.7
npmyuinpm
2026.7.19-22026.7.19-2-12026.7.19-2-22026.7.19-2-32026.7.19-2-42026.7.19-2-52026.7.19-2-62026.7.19-2-72026.7.19-2-82026.7.19-2-92026.7.19-2-102026.7.19-2-112026.7.19-2-122026.7.20-1-12026.7.20-1-22026.7.20-1-32026.7.20-1-42026.7.20-1-52026.7.20-1-62026.7.20-1-72026.7.20-1-82026.7.20-1-92026.7.20-1-102026.7.20-1-112026.7.20-1-122026.7.20-1-132026.7.20-1-142026.7.20-1-152026.7.20-1-162026.7.20-1-172026.7.20-1-182026.7.20-1-192026.7.20-1-202026.7.20-1-212026.7.20-1-222026.7.20-1-232026.7.20-1-242026.7.20-1-252026.7.20-1-262026.7.20-1-272026.7.20-1-282026.7.20-1-292026.7.20-1-302026.7.20-1-312026.7.20-1-322026.7.20-1-332026.7.20-1-342026.7.22-1-12026.7.22-1-22026.7.22-1-32026.7.22-1-42026.7.22-1-52026.7.22-1-62026.7.22-1-72026.7.22-1-82026.7.22-1-92026.7.22-1-102026.7.22-1-112026.7.22-1-122026.7.22-1-132026.7.22-1-142026.7.22-1-152026.7.22-1-162026.7.22-1-172026.7.22-1-182026.7.22-1-192026.7.22-1-202026.7.22-1-212026.7.22-1-222026.7.22-1-232026.7.22-1-24
npm-2026-07-24-ghsa-malware-sweepSource advisory
High24 Jul 2026
4 packages tracked
GitHub Advisory malware sweep - 4-package `app-data-*` / `app-node-*` v2.1.6 typosquat cluster (`app-data-layer`, `app-node-layer`, `app-data-ist`, `app-data-lts`) coordinated security-replace on 2026-07-24
On 2026-07-24 17:19:21 → 17:19:45 UTC (a 24-second window) GitHub retired 4 npm CWE-506 malware advisories for a tight app-*-prefixed typosquat/dependency-confusion cluster: app-data-layer, app-node-layer, app-data-ist, app-data-lts - all published as 2.1.6, all detected in a single coordinated pipeline sweep.
npm
Affected packages4 packages · 4 versions
npmapp-data-ist
2.1.6
npmapp-data-layer
2.1.6
npmapp-data-lts
2.1.6
npmapp-node-layer
2.1.6
npm-2026-07-24-app-cluster-ghsa-sweepSource advisory
High23 Jul 2026
19 packages tracked
GitHub Advisory malware sweep - 6-package crypto-wallet-drainer typosquat cluster (`ethers*` / `bs58-88` / `@bcryptln/*`), 7-package `version-110`/`version-22` dependency-confusion burst (`helix-deploy` / `vue-demi-fix` / `xrblocks-*` / etc.), and 6-package late-July typosquat/misc set swept 2026-07-23
On 2026-07-23 GitHub's Advisory Database retired 19 CWE-506 npm malware advisories in a coordinated 2-hour security-replace window. Three clusters emerge: a 6-package crypto-wallet-drainer typosquat cluster (ethers-packge, ethers-wallet-package, ethers-wallet-packages, bs58-88, @bcryptln/bcryptjs, @bcryptln/becryptjs) whose names ape the ethers, bs58, and bcryptjs crypto/hashing libraries; a 7-package version-110/version-22 dependency-confusion burst (helix-deploy, vue-demi-fix, xrblocks-remote-control, lychee-norm-cache, create-kumo-project, aio-commerce-lib-app, eslint-angular-react) using deliberately-inflated major versions to shadow internal-registry names; and a 6-package late-July typosquat/misc set (vitest-axios, fs-extra-core, cktool-core, mcp-notes-server-poc-praetorian, base65-85x, da-sc-sdk).
npm
Affected packages19 packages · 38 versions
npm@bcryptln/bcryptjs
3.0.3
npm@bcryptln/becryptjs
3.0.83.0.93.0.103.0.11
npmaio-commerce-lib-app
110.0.0
npmbase65-85x
5.0.1
npmbs58-88
6.0.1
npmcktool-core
1.0.01.0.11.0.21.0.31.0.4
npmcreate-kumo-project
22.0.0
npmda-sc-sdk
1.2.31.2.4
npmeslint-angular-react
110.0.0110.0.1110.0.2
npmethers-packge
2.1.2
npmethers-wallet-package
5.8.0
npmethers-wallet-packages
5.8.05.8.15.8.2
npmfs-extra-core
1.3.4
npmhelix-deploy
110.0.0110.0.1
npmlychee-norm-cache
22.0.0
npmmcp-notes-server-poc-praetorian
0.1.0
npmvitest-axios
1.0.4
npmvue-demi-fix
10.0.010.0.110.0.210.0.310.0.410.0.510.0.6
npmxrblocks-remote-control
22.0.0
npm-2026-07-23-ghsa-malware-sweepSource advisory
High22 Jul 2026
6 packages tracked
GitHub Advisory malware sweep - `encryptstring*` 3-package cluster, `react-tabulix-ui` 3-version burst, `vantora` 2-version pair, and `kijai` singleton swept 2026-07-22
On 2026-07-22 GitHub's Advisory Database retired six CWE-506 npm malware advisories. Dominant cluster: three encryptstring* packages (encryptstringadmin, encryptstringadmincore, encrypt-string-ttak) with 9 combined versions security-replaced within a 20-second window at 20:37 UTC - a coordinated single-actor encryptstring-themed publish burst. Also swept: react-tabulix-ui 3-version burst, vantora 2-version pair, and the pre-existing kijai singleton.
npm
Affected packages6 packages · 15 versions
npmencrypt-string-ttak
1.0.01.0.11.0.2
npmencryptstringadmin
1.2.11.3.01.4.2
npmencryptstringadmincore
1.0.11.1.01.2.2
npmkijai
0.0.2
npmreact-tabulix-ui
0.1.00.1.10.1.2
npmvantora
1.0.01.0.1
npm-2026-07-22-ghsa-malware-sweepSource advisory
High21 Jul 2026
6 packages tracked
GitHub Advisory malware sweep - 3-package `streak-*` habit-tracker cluster, `@apexfdn/apex` 33-version dependency-confusion burst, `nolby` 4-version rapid-burst, and `veskra` singleton swept 2026-07-21
On 2026-07-21 GitHub's Advisory Database retired six CWE-506 npm malware advisories. Highlights: a 3-package streak-* habit-tracker cluster (streak-daycount, streak-calendar, svelte-streaks) published within a 56-minute window on 2026-07-21 and security-replaced 8 hours later, a @apexfdn/apex 33-version 2.5-week dependency-confusion burst (1.0.0 → 1.0.32), and a nolby 4-version 4-hour rapid-burst.
npm
Affected packages6 packages · 43 versions
npm@apexfdn/apex
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.131.0.141.0.151.0.161.0.171.0.181.0.191.0.201.0.211.0.221.0.231.0.241.0.251.0.261.0.271.0.281.0.291.0.301.0.311.0.32
npmnolby
1.0.01.0.11.0.21.0.3
npmstreak-calendar
1.0.01.0.1
npmstreak-daycount
1.0.0
npmsvelte-streaks
1.0.01.0.11.0.2
npmveskra
npm-2026-07-21-ghsa-malware-sweepSource advisory
High21 Jul 2026
223 packages tracked
GitHub Advisory PyPI mass backfill - ~10,000 CWE-506 malware advisories published in a single day dominated by yfinance/python-binance/requests/tensorflow typosquats, wallet* crypto-stealer cluster, and xolo/lib*/py-mine* random-blob clusters
On 2026-07-21 GitHub's Advisory Database published a ~10,000-package PyPI CWE-506 malware backfill (400 GHSA pages × 25/page) - the largest single-day GHSA malware batch ever recorded, spanning the entire alphabet in descending order. Dominant themes: yfinance typosquats (~20 variants), python-binance/requests/tensorflow/beautifulsoup/websockets typosquats, a wallet* crypto-stealer cluster (~15 packages), a xolo* random-name blob cluster (~50 packages), and coordinated lib{cv,craft,ed}* random-word-combo clusters.
PyPI
Affected packages223 packages · 0 versions
PyPIdsicord-webhook
PyPIeautifulsoup
PyPIebautifulsoup
PyPIebautifulsoup4
PyPIebsocket-client
PyPIebsockets
PyPIlibcpumineed
PyPIlibcraftcontrolcraft
PyPIlibcraftosintnvidia
PyPIlibcraftreplaceencode
PyPIlibcraftsplithacked
PyPIlibcraftsplitint
PyPIlibcraftstringcc
PyPIlibcraftsuperre
PyPIlibcrypt
PyPIlibcvcandycontrol
PyPIlibcvcontrolhydra
PyPIlibcvcv
PyPIlibcvcvkill
PyPIlibcvencode
PyPIlibcvgetsplit
PyPIlibcvgrandpep
PyPIlibcvpiphttp
PyPIlibcvpippep
PyPIlibcvproofstr
PyPIlibcvstred
PyPIlibcvverstr
PyPIlibedencodemine
PyPIlibedlgtbreplace
PyPIlibedmcpong
PyPIlibedpephttp
PyPIpy-mccpu
PyPIpy-mcedcraft
PyPIpy-mcloadpaypal
PyPIpy-mcmcmask
PyPIpy-mcosint
PyPIpy-mcpyw
PyPIpy-mcrand
PyPIpy-mcrandom
PyPIpy-mcultracraft
PyPIpy-mcvirtualpy
PyPIpy-mineguigrand
PyPIpy-minelibcc
PyPIpy-minenvidia
PyPIpy-minepingsplit
PyPIpy-minepipram
PyPIpy-minepyencode
PyPIpy-minerampy
PyPIpy-minereplacesuper
PyPIpy-nvidiacandy
PyPIpy-nvidiagranded
PyPIpy-nvidiaguistr
PyPIpy-nvidiahttppep
PyPIpy-nvidiahydraget
PyPIpy-nvidialibhttp
PyPIpy-nvidiapepcontrol
PyPIreq-os
PyPIreq6
PyPIreq7
PyPIreqarg
PyPIreqargs
PyPIreqeist
PyPIreqeosts
PyPIreqesst
PyPIreqest-2022
PyPIreqest-dexfree
PyPIreqests-2
PyPIreqests-2022
PyPIreqests-toolbelt
PyPIreqeuest-2022
PyPIreqeuest-new
PyPIreqeuste
PyPIreqeusts-toolbelt
PyPIreqeustz
PyPIreqeuts
PyPIreqeyst
PyPIreqiest
PyPIreqinstall
PyPIreqjuests
PyPIreqquest
PyPIreqquests
PyPItensorflow-opt
PyPItensorflowlitex
PyPItensorflows
PyPItensroflow
PyPItenssorflow
PyPItensxxfxxk
PyPIterraformness
PyPItesorflow
PyPIultrapost
PyPIultraproof
PyPIultrasuper
PyPIultraultra
PyPIultravm
PyPIunclesky5910
PyPIunizip
PyPIunzipxz
PyPIupdate-mss
PyPIupdate-request
PyPIupdate-requests
PyPIupdater12
PyPIupdateuuid4
PyPIupggrade-requests
PyPIupgrade-requests
PyPIupgrade-requestss
PyPIupgrade-requestt
PyPIvypeer
PyPIvyperr
PyPIvypper
PyPIvyyper
PyPIw3b
PyPIw3b-py
PyPIw3bt00n
PyPIw3eb
PyPIw3socket
PyPIwallet-utils
PyPIwallet-utils-pro
PyPIwalletdecoders
PyPIwalletdecoderss
PyPIwalletrpcs
PyPIwallets-utils
PyPIwalletsutils
PyPIwallettron
PyPIwallettronpy
PyPIwalletutility
PyPIwalletweb3
PyPIxlsxwrietr
PyPIxlsxwritre
PyPIxlsxwritter
PyPIxoloazfgyobkaw
PyPIxolobwritbrulv
PyPIxolobzvfburelm
PyPIxolodyntlnewtp
PyPIxoloeduccelifz
PyPIxolofmdvxqvbmp
PyPIxoloftiqwxxhje
PyPIxolofyxkotqwko
PyPIxologrekjlqzxj
PyPIxolojbxzzttwpk
PyPIxolojgmnizxche
PyPIxolojhzyppbsow
PyPIxololcuakbzbuu
PyPIxolomjqalvrpmp
PyPIxolonavrylpbeb
PyPIxoloowlowpzeke
PyPIxoloqmotdjpbic
PyPIxolosafhpodvqo
PyPIxolosamsdyhcfa
PyPIxolosxelwsesnp
PyPIxolotcgstfiguu
PyPIxoloulfkhiyywc
PyPIxolovqryjphftd
PyPIxolowqffntthtb
PyPIxoloxwmellxliq
PyPIxoloyuaezcqixu
PyPIxorg-renderproto
PyPIxsltproc
PyPIxsxwriter
PyPIxwormclient
PyPIxxlsxwriter
PyPIxxoo-bale
PyPIxxx-bale
PyPIxyq-drama-skill
PyPIyc-as-client
PyPIyeahmankema
PyPIyellorq
PyPIyellyproxies
PyPIyffinance
PyPIyfiance
PyPIyfiannce
PyPIyfiinance
PyPIyfinaance
PyPIyfinace
PyPIyfinacne
PyPIyfinancce
PyPIyfinancee
PyPIyfinane
PyPIyfinanec
PyPIyfinannce
PyPIyfinnace
PyPIyfinnance
PyPIyfinnce
PyPIyfnance
PyPIyfniance
PyPIygame
PyPIyolov8mini
PyPIyoutube-new
PyPIyoutubebot
PyPIypsocks
PyPIypthon-binance
PyPIysocks
PyPIyt-api-dlp
PyPIyt-yson-bindings
PyPIython-binance
PyPIyuzo
PyPIyyfinance
PyPIzabitog
PyPIzafira
PyPIzakuchienne
PyPIzakuraweb
PyPIzamino
PyPIzatta
PyPIzebo
PyPIzelixnitro
PyPIzenomenallib
PyPIzeubilamouche
PyPIzhopaorlaaato
PyPIzip-me
PyPIziphash
PyPIzking
PyPIzlapp
PyPIzlib1g-dev
PyPIzlibxjson
PyPIzlsrc
PyPIzmaker
PyPIznomig
PyPIzorosnitro
PyPIzproxy
PyPIzproxy2
PyPIzscaner
PyPIzsender
PyPIztasimb
PyPIzydnitro
pypi-2026-07-21-ghsa-mass-backfillSource advisory
High20 Jul 2026
86 packages tracked
GitHub Advisory malware sweep - 5-package AWS/CDK dependency-confusion cluster, `upjsma` 9-version 3-day burst, and 80-package `@gocortexio/npmgremlinbox-*` Cortex red-team validation kit swept 2026-07-20
On 2026-07-20 GitHub's Advisory Database retired 86 CWE-506 npm malware advisories in a single sweep. Highlights: a 5-package AWS/CDK dependency-confusion cluster (alb-lambda-cdk, s3-lambda-dynamodb-cdk, lambda-cloudwatch-cdk, iot-kfh-s3, lwc-slds-lbc) published within a 20-minute window on 2026-07-18 with high dep-confusion pins, upjsma (9 versions across 3 days), and the 80-package @gocortexio/npmgremlinbox-* red-team validation kit from the Palo Alto Networks Cortex ecosystem tooling org.
npm
Affected packages86 packages · 95 versions
npm@gocortexio/npmgremlinbox-agpl-1-0
2.1.0
npm@gocortexio/npmgremlinbox-agpl-1-0-only
2.1.0
npm@gocortexio/npmgremlinbox-agpl-1-0-or-later
2.1.0
npm@gocortexio/npmgremlinbox-agpl-3-0
2.0.12.1.0
npm@gocortexio/npmgremlinbox-agpl-3-0-only
2.1.0
npm@gocortexio/npmgremlinbox-agpl-3-0-or-later
2.1.0
npm@gocortexio/npmgremlinbox-apsl
2.1.0
npm@gocortexio/npmgremlinbox-arphic-1999
2.1.0
npm@gocortexio/npmgremlinbox-artistic-1-0
2.1.0
npm@gocortexio/npmgremlinbox-base
2.1.0
npm@gocortexio/npmgremlinbox-busl-1-1
2.1.0
npm@gocortexio/npmgremlinbox-c-uda-1-0
2.1.0
npm@gocortexio/npmgremlinbox-cal-1-0-combined-work-exception
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-nc-3-0-de
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-nc-nd-3-0-de
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-nc-nd-3-0-igo
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-nc-sa-2-0-de
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-nc-sa-2-0-fr
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-nc-sa-2-0-uk
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-nc-sa-3-0-de
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-nc-sa-3-0-igo
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-nd-3-0-de
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-sa-2-0-uk
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-sa-2-1-jp
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-sa-3-0-at
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-sa-3-0-de
2.1.0
npm@gocortexio/npmgremlinbox-cc-by-sa-4-0
2.1.0
npm@gocortexio/npmgremlinbox-cddl-1-0
2.1.0
npm@gocortexio/npmgremlinbox-cdla-sharing-1-0
2.1.0
npm@gocortexio/npmgremlinbox-cern-ohl-s-2-0
2.1.0
npm@gocortexio/npmgremlinbox-cern-ohl-w-2-0
2.1.0
npm@gocortexio/npmgremlinbox-copyleft-next-0-3-0
2.1.0
npm@gocortexio/npmgremlinbox-copyleft-next-0-3-1
2.1.0
npm@gocortexio/npmgremlinbox-cpol-1-02
2.1.0
npm@gocortexio/npmgremlinbox-ecos-2-0
2.1.0
npm@gocortexio/npmgremlinbox-epl-1-0
2.1.0
npm@gocortexio/npmgremlinbox-epl-2-0
2.1.0
npm@gocortexio/npmgremlinbox-eupl-1-1
2.1.0
npm@gocortexio/npmgremlinbox-eupl-1-2
2.1.0
npm@gocortexio/npmgremlinbox-eupl-3-0
2.1.0
npm@gocortexio/npmgremlinbox-fdk-aac
2.1.0
npm@gocortexio/npmgremlinbox-gpl-2-0
2.1.0
npm@gocortexio/npmgremlinbox-gpl-3-0
2.1.0
npm@gocortexio/npmgremlinbox-hippocratic-2-1
2.1.0
npm@gocortexio/npmgremlinbox-jpl-image
2.1.0
npm@gocortexio/npmgremlinbox-lgpl-2-0
2.1.0
npm@gocortexio/npmgremlinbox-lgpl-2-1
2.1.0
npm@gocortexio/npmgremlinbox-lgpl-3-0
2.1.0
npm@gocortexio/npmgremlinbox-linux-man-pages-copyleft
2.1.0
npm@gocortexio/npmgremlinbox-malware-c2-beacon
2.1.0
npm@gocortexio/npmgremlinbox-malware-code-obfuscation
2.1.0
npm@gocortexio/npmgremlinbox-malware-credential-harvesting
2.1.0
npm@gocortexio/npmgremlinbox-malware-cryptomining-indicators
2.1.0
npm@gocortexio/npmgremlinbox-malware-install-execution
2.1.0
npm@gocortexio/npmgremlinbox-malware-network-indicators
2.1.0
npm@gocortexio/npmgremlinbox-mpl-1-1
2.1.0
npm@gocortexio/npmgremlinbox-mpl-2-0
2.1.0
npm@gocortexio/npmgremlinbox-ms-lpl
2.1.0
npm@gocortexio/npmgremlinbox-ncgl-uk-2-0
2.1.0
npm@gocortexio/npmgremlinbox-openpbs-2-3
2.1.0
npm@gocortexio/npmgremlinbox-osl-3-0
2.1.0
npm@gocortexio/npmgremlinbox-polyform-noncommercial-1-0-0
2.1.0
npm@gocortexio/npmgremlinbox-polyform-small-business-1-0-0
2.1.0
npm@gocortexio/npmgremlinbox-qpl-1-0-inria-2004
2.1.0
npm@gocortexio/npmgremlinbox-sendmail-8-23
2.1.0
npm@gocortexio/npmgremlinbox-simpl-2-0
2.1.0
npm@gocortexio/npmgremlinbox-sspl-1-0
2.1.0
npm@gocortexio/npmgremlinbox-tapr-ohl-1-0
2.1.0
npm@gocortexio/npmgremlinbox-tpl-1-0
2.1.0
npm@gocortexio/npmgremlinbox-typosquat-axios
2.1.0
npm@gocortexio/npmgremlinbox-typosquat-chalk
2.1.0
npm@gocortexio/npmgremlinbox-typosquat-commander
2.1.0
npm@gocortexio/npmgremlinbox-typosquat-express
2.1.0
npm@gocortexio/npmgremlinbox-typosquat-lodash
2.1.0
npm@gocortexio/npmgremlinbox-typosquat-moment
2.1.0
npm@gocortexio/npmgremlinbox-typosquat-react
2.1.0
npm@gocortexio/npmgremlinbox-typosquat-webpack
2.1.0
npm@gocortexio/npmgremlinbox-ucl-1-0
2.1.0
npm@gocortexio/npmgremlinbox-unlicense
2.1.0
npm@gocortexio/npmgremlinbox-wxwindows
2.1.0
npmalb-lambda-cdk
18.2.22
npmiot-kfh-s3
17.3.23
npmlambda-cloudwatch-cdk
0.0.0
npmlwc-slds-lbc
18.9.41
npms3-lambda-dynamodb-cdk
15.10.16
npmupjsma
1.0.581.0.591.0.601.0.611.0.621.0.631.0.641.0.651.0.66
npm-2026-07-20-ghsa-malware-sweepSource advisory
High20 Jul 2026
174 packages tracked
GitHub Advisory backfill sweep - ~264 NuGet CWE-506 malware advisories dominated by Solana wallet impersonators, WPF/WinForms UI-kit typosquats, and popular-API impersonators (Zendesk, Binance, Coinbase, Ripple, Stripe, PayPal, Kraken, Kucoin, Huobi, Bybit)
On 2026-07-20 GitHub's Advisory Database published a ~264-package NuGet CWE-506 malware backfill - the largest single-day NuGet sweep on record. Dominant themes: Solana/crypto wallet impersonators (~15 packages: Solana, SolanaWallet, solananet, solnetplus, solnetall, solnetunified, solnetwallet.net.core), WPF/WinForms UI-kit typosquats (~40 packages: WPF-UI-Net, WpfAnimatedGif.Net, WpfLightToolkit.Net, LiveCharts.net, Bunifu.*), Oracle Cloud SDK impersonators (OCI.DotNetSDK.*, ~25 packages), and crypto-exchange API impersonators (Binance, Kucoin, Kraken, Bybit, Coinbase, Huobi, Ripple).
NuGet
Affected packages174 packages · 0 versions
NuGetAlgoTrading
NuGetAlgoTrading.Net
NuGetAltcoins
NuGetAltcoins.Library
NuGetbinance.csharp
NuGetBinance.Libary
NuGetBinance.Library
NuGetbitcoincore
NuGetBitcoinLib.Net
NuGetBlazor.Captcha
NuGetBlockcore.Networks.Bitcoin.Bc
NuGetbsure.binsec
NuGetbsure.utils
NuGetBunifu
NuGetBunifu.Form
NuGetBunifu.GUI
NuGetBunifu.UI.WinForms.Net
NuGetBunifu.UI2Winforms
NuGetBunifu.UI3Winforms
NuGetBybit.Net.Core
NuGetCaptchaCsharp
NuGetCefSharp.WinForm.Net.Core
NuGetChronos.Platform.Linux.API
NuGetClipboard.net
NuGetCodeExecTest
NuGetCoinbase.Api
NuGetGetRekt420
NuGetGoogleReCaptcha.V4
NuGethackney.core.enums
NuGethackney.core.jwt
NuGetHuobi.Net.Core
NuGetjjrawlins.cdkiampolicybuilderhelper
NuGetKANYEWESTBRIDGADE
NuGetKanyeWestBrigade
NuGetKanyeWestWasRight
NuGetKeyAuthAPI
NuGetKrakenExchange.Net.Core
NuGetKucoin.Net.Core
NuGetLedgerWallet.Net
NuGetLfafafa2
NuGetLfafafa3
NuGetLib.Harmony.net
NuGetLibEmbedder.Fody
NuGetLitecoin
NuGetLive.Charts.WinForm
NuGetLiveCharts.net
NuGetLiveCharts.WinForms.net
NuGetLiveCharts.Wpf.net
NuGetMailBee
NuGetmarkdown-to-html
NuGetMetroModern.UI2
NuGetnethereumunified
NuGetNotifyIcons
NuGetNotus.Wallet.Utility.Net
NuGetNughettt.TestPO
NuGetOCI.DotNetSDK.Ai.speech
NuGetOCI.DotNetSDK.Ai.vision
NuGetOCI.DotNetSDK.Apm.config
NuGetOCI.DotNetSDK.Appmgmtcontrol.Net
NuGetOCI.DotNetSDK.Certificates.Net
NuGetOCI.DotNetSDK.Certificatesmanagement.Net
NuGetOCI.DotNetSDK.Dashboard.service
NuGetOCI.DotNetSDK.Databasetools.Net
NuGetOCI.DotNetSDK.Datalabeling.service
NuGetOCI.DotNetSDK.File.storage
NuGetOCI.DotNetSDK.Net
NuGetOCI.DotNetSDK.Ospgateway.Net
NuGetOCI.DotNetSDK.Osubbillingschedule.Net
NuGetOCI.DotNetSDK.Osuborganizationsubscription.Net
NuGetOCI.DotNetSDK.Osubsubscription.Net
NuGetOCI.DotNetSDK.Osubusage.Net
NuGetOCI.DotNetSDK.Servicemanager.proxy
NuGetOCI.DotNetSDK.Threat.intelligence
NuGetOCI.DotNetSDK.Usage.Net
NuGetOCI.DotNetSDK.Visualbuilder.Net
NuGetOCI.DotNetSDK.Waf.Net
NuGetOpenCvSharp4.WpfExtensions.Net
NuGetOtpCsharp
NuGetPathoschild.Stardew.Mod.Build.Config
NuGetPathoschild.Stardew.ModBuildConfig.Net
NuGetPayPalMerchant.SDK
NuGetPDFTron.NETCore.Windows.x64.Net
NuGetPortable.Xaml.Net
NuGetppy.osu.Game.Lib
NuGetPrivacyGate.net
NuGetpsbuiId
NuGetPubIishIgnore
NuGetPublishIgnor
NuGetRadPdf.Net
NuGetReactive.GUI.Winforms
NuGetReaLTaiizor-WinForm
NuGetReddit.api
NuGetReothor.Lab.EvilPackage
NuGetResource.Embedder.Net
NuGetRg.Plugins.Popups.Net
NuGetRimworld.Reference.Libary
NuGetRimworld.References.Net
NuGetRipple.NetCore.Api
NuGetRockstar.AssetManager.Infrastructure
NuGetRSG.Base
NuGetSanka.UI.WinForms
NuGetSanka.UI2.WinForms
NuGetSanka.UI3.WinForms
NuGetsecurity_hacks
NuGetseedefender
NuGetShade.UI.WinForms
NuGetShade.WPF.Controls
NuGetSharpCashAddr.Core
NuGetsharpdefender
NuGetSimplify.Windows.Forms.Net
NuGetSkylark.Net
NuGetSoenneker.Redis.Util.Net
NuGetSolana
NuGetsolananet
NuGetSolanaWallet
NuGetsolnetall
NuGetsolnetall.net
NuGetsolnetplus
NuGetsolnetunified
NuGetsolnetwallet.net.core
NuGetsqzrframework480
NuGetStl.Blazor.Authentication.Net
NuGetStl.CommandLine.Net
NuGetStl.Fusion.Ext.Contracts.Net
NuGetStl.Fusion.Ext.Services.Net
NuGetStl.Generators.Net
NuGetStl.Plugins.Extensions.Net
NuGetStl.RestEase.Net
NuGetStl.Rpc.Server.Core
NuGetStl.Rpc.Server.Net.Fx
NuGetstripeapi.net
NuGetSuperpower-Api
NuGetSyntellect.Winium.Cruciatus.Net
NuGetSyntellect.Winium.Element
NuGetSyntellect.Winium.Web.Driver
NuGetTessa.Analyzer
NuGetTessa.Compilations
NuGetTessa.Core
NuGetTessa.Linux.V2
NuGetTessa.Net.V2
NuGetTessa.Postgre.Sql
NuGetTessa.Server.Net
NuGetTessa.UI2
NuGetTessa.Web.Client.Net
NuGetTessa.Web.Core
NuGetTessa.Windows.V2
NuGettest6789.client
NuGettest6789.latest
NuGettest6789.v3
NuGettestt22esttest
NuGetTheOpenAI.API
NuGetUI2.Guna.Winforms
NuGetUltimate.Wpf.Toolkit
NuGetvspropertypages
NuGetWhatsapp.API
NuGetWindowsAPICodePack.Net
NuGetWinforms
NuGetWPF-UI-Net
NuGetWpf.UI.WinForms
NuGetWpfAnimatedGif.Net
NuGetWpfLightToolkit.Net
NuGetWPFMediaKit.Net
NuGetWpfScreenHelper.Net
NuGetwpfuihelpercore
NuGetXam.Plugins.Forms.Svg.Net
NuGetXboxGamebar
NuGetxopxopxopxopxopx
NuGetYoutubeExtractor.Net
NuGetZendesk
NuGetZendesk-Api
NuGetZendesk.Client
NuGetZendesk.Drivers
NuGetZendesk.OAuth
NuGetZendeskApi.Client.V2
nuget-2026-07-20-ghsa-backfill-sweepSource advisory
High18 Jul 2026
8 packages tracked
GitHub Advisory malware sweep - 8 npm packages (3-package `syft-acp-*` "click2ai" dep-confusion beacon, 2-package `@edgecommons/*` preinstall-hook pair, `axios-native` + `telemetry-axios` axios typosquats, `easyway2` 12-version 4-hour burst) retired 2026-07-17 → 2026-07-18
On 2026-07-17 and 2026-07-18 GitHub's Advisory Database retired 8 CWE-506 npm malware advisories. Highlights: a 3-package syft-acp-* dependency-confusion trio published by npm account ada8877 that beacons victim IP + hostname to a Sentry ingest endpoint (byte-for-byte reuse of the earlier "click2ai" reconnaissance payload), a 2-package @edgecommons/* preinstall-hook pair, and axios typosquats axios-native + telemetry-axios.
npm
Affected packages8 packages · 19 versions
npm@edgecommons/edgecommons
1.0.0
npm@edgecommons/streamlog-node
1.0.0
npmaxios-native
1.0.0
npmeasyway2
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.11
npmsyft-acp-atoms
14.8.68
npmsyft-acp-core
16.0.0
npmsyft-acp-uikit
1.9.45
npmtelemetry-axios
1.0.0
npm-2026-07-18-ghsa-malware-sweepSource advisory
High18 Jul 2026
9 packages tracked
crates.io dependency-confusion burst - 9 Rust crates targeting AWS, Mysten Labs, Replit, Proton, plus 4 generic-name typosquats, all flagged by OpenSSF Package Analysis on 2026-07-18
On 2026-07-18 the OpenSSF Package Analysis project flagged 9 Rust crates as malware - all yanked from crates.io within hours and mirrored into the GitHub Advisory Database as CWE-506 records. The 99.x.x version pins on mysten-metrics, amzn-codewhisperer-streaming-client, amzn-consolas-client, replit_ruspty, semantic-search-client, supertag, proton-pfff, and lsh are classic dep-confusion telltales. Every crate communicates with an attacker-controlled domain and executes commands on install.
crates.io
Affected packages9 packages · 11 versions
crates.ioamzn-codewhisperer-streaming-client
99.0.1
crates.ioamzn-consolas-client
99.0.1
crates.iolittest
0.3.1
crates.iolsh
99.0.199.1.0
crates.iomysten-metrics
9.0.09.0.3
crates.ioproton-pfff
99.99.5
crates.ioreplit_ruspty
1.0.0
crates.iosemantic-search-client
99.0.1
crates.iosupertag
99.1.1
crates-2026-07-18-openssf-typosquat-burstSource advisory
High18 Jul 2026
3 packages tracked
GitHub Advisory malware sweep - 3 PyPI packages retired 2026-07-18 (`govpkg` telegra.ph-C2 downloader + persistent fake-service; `trongridev`/`trongridme` Tron private-key exfil pair)
On 2026-07-18 GitHub's Advisory Database retired 3 CWE-506 PyPI malware advisories. Highlights: govpkg (versions 0.1.0, 0.2.0 - the OSSF-tagged 2026-07-govpkg campaign) silently downloads a native executable, disguises it as a system service for persistence, and uses telegra.ph (Telegraph anonymous-publishing) as C2; and a trongridev/trongridme Tron private-key exfil pair (both v0.0.1) from the recurring OSSF 2025-04-tronix campaign.
PyPI
Affected packages3 packages · 4 versions
PyPIgovpkg
0.1.00.2.0
PyPItrongridev
0.0.1
PyPItrongridme
0.0.1
pypi-2026-07-18-ghsa-malware-sweepSource advisory
High18 Jul 2026
3 packages tracked
SleeperGem - dormant RubyGems maintainer takeover drops persistent developer-laptop backdoor via `git.disroot.org` Forgejo second-stage (git_credential_manager, Dendreo, fastlane-plugin-run_tests_firebase_testlab)
On 2026-07-18 → 07-19 an actor reactivated two long-dormant RubyGems maintainer accounts (Dendreo, dormant since 2020; fastlane-plugin-run_tests_firebase_testlab, dormant since 2019) and published a brand-new git_credential_manager gem impersonating Microsoft's Git Credential Manager. Seven malicious releases across three gems fetch a second-stage binary from git.disroot.org/git-ecosystem/* (Forgejo), skip execution if any of ~30 CI env vars are present, and drop a persistent native daemon on developer laptops.
RubyGems
Affected packages3 packages · 7 versions
RubyGemsDendreo
1.1.31.1.4
RubyGemsfastlane-plugin-run_tests_firebase_testlab
0.3.2
RubyGemsgit_credential_manager
2.8.02.8.12.8.22.8.3
rubygems-2026-07-18-sleepergem-dormant-maintainer-takeoverSource advisory
High17 Jul 2026
12 packages tracked
"Polymarket Trap" - fake arbitrage-bot repo funnels DeFi devs to a 30-package infostealer cluster
SafeDep and Panther jointly disclosed the "Polymarket Trap" on 2026-07-17: a fake Trum3it/polymarket-arbitrage-bot GitHub repo (36 stars, 53 forks) whose package.json declares clob-client-math as a peer utility that is never imported. The 30-package cluster spans 10 coordinated npm accounts under two profiles - Polymarket / CLOB SDK impersonators (clob-client-math, polymarket-stake-math, polymarket-trade and siblings) and DeFi-math typosquats (bn-lint, ts-precision, decimal-format-utils). A postinstall hook drops a 2,787–2,887-line JavaScript infostealer that harvests crypto wallets, browser vaults, SSH keys, cloud tokens, and password-manager databases.
npm
Affected packages12 packages · 29 versions
npmbn-lint
3.0.63.0.8
npmclob-client-math
1.0.01.0.1
npmdecimal-format-utils
1.0.01.0.1
npmpolymarket-ai-agent
0.1.00.1.1
npmpolymarket-auto-trade
0.1.00.1.1
npmpolymarket-bot
0.1.00.1.1
npmpolymarket-claude-code
0.1.00.1.1
npmpolymarket-copy-trading
0.1.00.1.1
npmpolymarket-stake-math
3.1.03.2.03.3.03.4.03.5.03.5.1
npmpolymarket-stake-maths
3.1.03.2.03.3.03.5.2
npmpolymarket-trade
0.1.00.1.1
npmts-precision
3.7.2
npm-2026-07-17-polymarket-trap-clob-client-mathSource advisory
High16 Jul 2026
18 packages tracked
GitHub Advisory malware sweep - 18 npm packages (2 Claude / Anthropic-brand typosquats, 3-package `chain-sdk-js` / `theta-sdk-js` / `ai-pro-sdk` mid-July SDK cluster, 3-package `ai-p2p` / `websight-p2p` / `websight2-p2p` June 15 P2P burst, 3 auto-publisher sleepers `px8my` (55 versions) / `monogrok` (21 versions) / `scan-only` (16 versions), plus WordPress Gutenberg / terminal-toy / singleton fillers) retired 2026-07-16 → 2026-07-17
On 2026-07-16 and 2026-07-17 GitHub's Advisory Database retired 18 CWE-506 npm malware advisories (separate from 2 additional chai-as-* retirements folded into the existing jsonspack DPRK incident). Highlights: anthropic-claude-latest - a version-matched (4.7.1 / 4.7.2 / 4.7.3) typosquat of Anthropic's Claude Code CLI - and claude-token-tracker-mcp, an MCP-shape package targeting Claude Code's OAuth-token traffic (matching the Mitiga Labs "MCP token theft" attack chain that abuses .claude.json).
npm
Affected packages18 packages · 154 versions
npmai-p2p
1.0.01.0.11.0.21.0.31.0.4
npmai-pro-sdk
2.0.12.0.22.0.32.0.4
npmanthropic-claude-latest
4.7.14.7.24.7.3
npmawesome-terminal
1.0.11.0.21.0.31.0.4
npmchain-sdk-js
1.0.21.0.31.0.41.0.51.0.6
npmclaude-token-tracker-mcp
1.0.0
npmhehehe
1.0.01.0.41.0.51.0.61.0.72.0.12.0.2
npmloader1
2.1.22.1.32.1.42.1.52.1.62.1.7
npmmonogrok
1.0.11.0.71.0.81.0.111.0.141.0.301.0.311.0.321.0.331.0.341.0.351.0.361.0.371.0.391.0.401.0.411.0.431.0.44
npmmy-tailwind-gutenberg-block
0.1.00.1.20.1.30.1.40.1.5
npmpx8my
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.131.0.141.0.151.0.161.0.171.0.181.0.191.0.201.0.211.0.221.0.231.0.241.0.251.0.261.0.271.0.281.0.291.0.301.0.311.0.321.0.331.0.341.0.351.0.361.0.371.0.381.0.391.0.401.0.411.0.421.0.431.0.441.0.451.0.461.0.471.0.481.0.491.0.501.0.511.0.521.0.531.0.54
npmscan-only
0.2.00.3.00.4.00.4.10.4.20.4.30.4.40.4.50.4.60.4.70.4.80.4.90.5.00.5.11.0.0
npmterminal-mascot
1.0.01.0.11.0.21.0.33.5.23.5.3
npmtheta-sdk-js
1.2.141.2.151.2.161.2.17
npmvor8zakon
1.0.0
npmwebsight-p2p
1.0.01.0.11.0.21.0.31.0.41.0.51.0.6
npmwebsight2-p2p
1.0.01.0.11.0.21.0.31.0.4
npmwordpad-text-ui
1.0.01.0.11.0.2
npm-2026-07-16-ghsa-malware-sweepSource advisory
High15 Jul 2026
25 packages tracked
GitHub Advisory malware sweep - 25 npm packages (6-package `@sauruslord` / `zaldy-baileys` WhatsApp-Baileys-fork cluster, 4-package `webpack-cache-*` / `vite-config-optimizer` 35-day dep-confusion sleeper, `patientdocuments` + `fhirproxy-utils` FHIR/healthcare pair, `@bcs-mi-ui` 3-package internal cluster, `js-shared-modules` scope-pair) retired 2026-07-15
On 2026-07-15 GitHub's Advisory Database retired 25 CWE-506 npm malware advisories in four clean bursts. Highlights: a 6-package @sauruslord / zaldy-baileys / saurus-assets Baileys WhatsApp-API fork cluster (retired inside a 65-second window at 05:11-05:12 UTC - same operator signature as the earlier @skyzopedia/baileys-mod and lotusbail WhatsApp-message-stealer campaigns), a 4-package webpack-cache-cycle / webpack-session-cache / webpack-cache-reset / vite-config-optimizer 35-day sleeper retired in a 15-second burst, and a healthcare-targeted patientdocuments@75.0.0 + fhirproxy-utils FHIR-namespace dep-confusion pair.
npm
Affected packages25 packages · 56 versions
npm@achuthvp/postinstall-poc
1.0.01.0.11.0.21.0.3
npm@bcs-mi-ui/message
1.0.2
npm@bcs-mi-ui/message-block
1.0.2
npm@bcs-mi-ui/test1243npmpacket76
1.0.2
npm@hkyyy/portal-widget-helper-0601
1.0.0
npm@saladin0x1/js-shared-modules
1.11.6
npm@sauruslord/baileys
1.0.01.0.1
npm@sauruslord/eslint-config
2.0.12.0.2
npm@sauruslord/libsignal
2.0.0
npmfhirproxy-utils
1.0.8
npmgpu-accelerator
1.4.21.4.31.4.41.4.51.4.61.4.7
npmjs-shared-modules
1.11.61.11.7
npmldpbootstrap-jquery
1.0.01.0.21.0.31.0.41.0.51.0.61.0.71.0.91.0.101.0.111.0.121.0.131.0.141.0.151.0.16
npmpatientdocuments
75.0.0
npmpostcss-processor-utils
1.0.01.0.11.0.21.0.3
npmsaurus-assets
1.0.0
npmsauruslord-baileys
1.0.22.0.03.0.2
npmssweb-wp
1.0.0
npmtestzapier
1.0.01.0.1
npmtextshape-css
1.0.0
npmvite-config-optimizer
1.1.4
npmwebpack-cache-cycle
0.1.4
npmwebpack-cache-reset
0.1.4
npmwebpack-session-cache
0.1.4
npmzaldy-baileys
2.0.0
npm-2026-07-15-ghsa-malware-sweepSource advisory
Critical14 Jul 2026
4 packages tracked
AsyncAPI npm org compromised - 4 packages / 5 versions ship Miasma botnet loader via GitHub Actions `pull_request_target` pwn request
On 2026-07-14 an attacker exploited a pull_request_target misconfiguration in asyncapi/generator to steal a highly-privileged GitHub PAT, then published five malicious @asyncapi/* releases through the project's own trusted GitHub Actions release pipeline - valid npm OIDC provenance and all. The payload fires on require(), spawns a detached Node process, fetches an 8.25 MB IPFS loader (Miasma), and installs a 3.09 MB implant with six independent C2 channels (HTTP, Nostr, IPFS, BitTorrent DHT, libp2p GossipSub, Ethereum smart contract). Combined weekly downloads: ~2.9M.
npm
Affected packages4 packages · 5 versions
npm@asyncapi/generator
3.3.1
npm@asyncapi/generator-components
0.7.1
npm@asyncapi/generator-helpers
1.1.1
npm@asyncapi/specs
6.11.2-alpha.16.11.2
npm-2026-07-14-asyncapi-miasma-actions-pwn-requestSource advisory
High14 Jul 2026
8 packages tracked
PhantomSync - 8-package npm crypto-developer cluster with delayed self-persisting dropper
Between 2026-07-13 and 2026-07-14 the npm publisher solbuilder_io (angel_lopez89@proton.me) shipped eight small crypto-developer packages - base58-utils, abi-encode, eth-dev, arb-kit, layer2-sdk, solana-key-utils, eth-wallet-helpers, crypto-validate-lib - each carrying a working utility plus a self-invoking dropper that fires ~37s after import, installs cross-platform persistence, and launches an RSA-4096 crypto-wallet stealer exfiltrating to public IPFS. npm-support unpublished every version on 2026-07-14 17:23 UTC.
npm
Affected packages8 packages · 31 versions
npmabi-encode
1.0.01.0.11.0.21.0.31.0.4
npmarb-kit
1.0.01.0.1
npmbase58-utils
1.0.01.0.11.0.31.0.41.0.5
npmcrypto-validate-lib
1.0.01.0.11.0.21.0.3
npmeth-dev
1.0.01.0.11.0.21.0.31.0.4
npmeth-wallet-helpers
1.0.01.0.11.0.21.0.3
npmlayer2-sdk
1.0.01.0.1
npmsolana-key-utils
1.0.01.0.11.0.21.0.3
npm-2026-07-14-phantomsync-crypto-wallet-dropperSource advisory
High13 Jul 2026
14 packages tracked
GitHub Advisory malware sweep - 14 npm packages (10-package `getd-*` / `get*` 40-day Spanish-enterprise sleeper cluster, `pure-folder-three` poisoned bump, `dotnet-runtime-base` fresh burst, `node-sysmetrics`, `@jplopezy/connectivity-test-do-not-install`) retired 2026-07-13
On 2026-07-13 GitHub's Advisory Database retired 14 CWE-506 npm malware advisories. The main event is a 10-package getd-* / get* Spanish-enterprise dep-confusion sleeper cluster (all 0.0.1 published in a 22-second burst 2026-06-03 13:48–13:49 UTC, dormant for 40 days, then retired in a 47-second take-down burst at 04:51–04:52 UTC). Also included: a maintainer-takeover-style poisoned bump on pure-folder-three@0.7.3, dotnet-runtime-base@{1.0.4,1.0.5} in a same-day fresh burst, node-sysmetrics@1.0.0, and @jplopezy/connectivity-test-do-not-install.
npm
Affected packages14 packages · 20 versions
npm@jplopezy/connectivity-test-do-not-install
0.0.0-test
npmdotnet-runtime-base
1.0.41.0.5
npmgetd-content-management
0.0.1
npmgetd-eslint-rules
0.0.1
npmgetd-handler-api
0.0.1
npmgetd-pantallas-cliente
0.0.1
npmgetd-transactional-web
0.0.1
npmgetd-typescript-eslint-rules
0.0.1
npmgetd-ui-library
0.0.1
npmgetd-web-corporativa
0.0.1
npmgethandler-api
0.0.1
npmgetui-library
0.0.1
npmnode-sysmetrics
1.0.01.0.1
npmpure-folder-three
0.5.00.6.00.7.00.7.10.7.3
npm-2026-07-13-ghsa-malware-sweepSource advisory
High11 Jul 2026
11 packages tracked
GitHub Advisory malware sweep - 11 npm packages (Higher Logic / AT&T eBiz / Amtrav / babel-eslint dep-confusion continuation, `type-*` 3.3.7 micro-cluster, `authvaultx` + `auth-next-gen` auth-typosquat pair) taken down 2026-07-10 / 2026-07-11
On 2026-07-10 (late-day) and 2026-07-11 GitHub's Advisory Database retired 11 CWE-506 npm malware advisories that arrived after the earlier 2026-07-10 sweep. Highlights: enterprise dependency-confusion continuation (@higherlogic/ocfe, @att-ebiz/abs-components-bc, @amtrav/webservice, babel-eslint-parser-legacy - all 99.9.1 race pins staged 2026-07-07 08:25–08:31 UTC), a type-elint / type-plint / type-atob micro-cluster (all 3.3.7, published 2026-07-10 14:13–15:30 UTC), and an authvaultx + auth-next-gen auth-typosquat pair replaced 2026-07-11 00:06 UTC.
npm
Affected packages11 packages · 12 versions
npm@amtrav/webservice
99.9.1
npm@att-ebiz/abs-components-bc
99.9.9
npm@higherlogic/ocfe
99.9.1
npmauth-next-gen
1.7.11
npmauthvaultx
1.0.0
npmbabel-eslint-parser-legacy
99.9.1
npmpolipoli-pak
1.0.11.0.2
npmryan-pdf-js
1.0.0
npmtype-atob
3.3.7
npmtype-elint
3.3.7
npmtype-plint
3.3.7
npm-2026-07-11-ghsa-malware-sweepSource advisory
Critical11 Jul 2026
1 package tracked
Official `jscrambler` npm package compromised - 5 malicious releases drop a cross-platform Rust infostealer (Chrome/Brave/Edge/Chromium profiles, Bitwarden vault, Steam sessions, cloud metadata, MetaMask/Phantom/Exodus wallets)
On 2026-07-11 15:12 UTC the official jscrambler npm package was hijacked via the jscrambler_ maintainer account. Five malicious releases (8.14.0, 8.16.0, 8.17.0, 8.18.0, 8.20.0) shipped a Rust infostealer that harvests Chromium browser profiles, the Bitwarden vault, Steam sessions, AWS/Azure/GCP credentials, and MetaMask/Phantom/Exodus wallet seeds.
npm
Affected packages1 package · 5 versions
npmjscrambler
8.14.08.16.08.17.08.18.08.20.0
npm-2026-07-11-jscrambler-rust-infostealerSource advisory
High10 Jul 2026
25 packages tracked
GitHub Advisory malware sweep - 25 npm packages (Epic Games / Unreal Engine internal-scope dependency-confusion cluster, LuminaryCloud, Reddit Voyager, nodemon family) taken down 2026-07-09 / 2026-07-10
On 2026-07-09 and 2026-07-10 GitHub's Advisory Database retired 25 CWE-506 Embedded Malicious Code npm advisories. The main story is a coordinated dependency-confusion burst against internal enterprise namespaces - Epic Games / Unreal Engine build tooling (robomerge, unreal-horde-dashboard, ue-jenkins-buildkite, ue-automation-scripts, epic-internal-tools), LuminaryCloud (@luminarycloudinternal/*), Reddit-style Voyager UI (voyager-web, searchresults), plus workspace/microsite scopes - all replaced by npm Security within a 12-minute window on 2026-07-10 02:57–03:10 UTC. A smaller tail of nodemon-* / chai-redirection / paperclip-adapter-helpers typosquats and 2026-07-09 throwaways (none123s, tslint-conf) rounds out the sweep.
npm
Affected packages25 packages · 25 versions
npm@businessapp-microsites/apis
99.9.9
npm@kl-starfish/test-01
2.0.0
npm@luminarycloudinternal/frodo
99.9.9
npm@luminarycloudinternal/lcvis-st
99.9.9
npmchai-redirection
1.0.0
npmcrypto-promiser
1.0.0
npmcursed-ecto-d3ab00
1.0.0
npmepic-internal-tools
99.9.9
npmnodemon-gulp
1.0.0
npmnodemon-patch
1.0.0
npmnodemon-sudo
1.0.0
npmnodepack-daemon
1.0.0
npmnone123s
1.0.0
npmpaperclip-adapter-helpers
1.0.0
npmrobomerge
99.9.9
npmsearchresults
99.9.9
npmtslint-conf
1.0.0
npmtxs-builder-lib
1.0.0
npmue-automation-scripts
99.9.9
npmue-jenkins-buildkite
99.9.9
npmunreal-horde-dashboard
99.9.9
npmvoyager-web
99.9.9
npmvps-new-manager
1.0.0
npmworkspace-lint
99.9.9
npmworkspace-scripts
99.9.9
npm-2026-07-10-ghsa-malware-sweepSource advisory
High8 Jul 2026
20 packages tracked
GitHub Advisory malware sweep - 20 npm packages (Claude-Code / Vue-CLI "clavue" typosquat cluster, `na-rony` throwaway sextet, tailwind-core, common-tg-service six-month sleeper) taken down 2026-07-08 / 2026-07-09
On 2026-07-08 and 2026-07-09 GitHub's Advisory Database retired ~20 CWE-506 Embedded Malicious Code npm advisories, continuing the July take-down cadence at ~20 packages/day. Two distinct clusters: a clavue / Claude-Code typosquat family (myclaude-code, clavue, clavuepro, calvuepro, clavue-agent-sdk) targeting Anthropic AI CLI developers; and a *`na-rony throwaway sextet** - six packages published by one operator between 2026-07-08 03:22–03:39 UTC. Plus a tailwind-core typosquat carrying a real 4.3.x version history and the six-month sleeper common-tg-service` with 547 versions.
npm
Affected packages20 packages · 254 versions
npm@calm2026/imux
1.9.11.10.01.10.21.10.31.10.41.11.0
npm@vite-ln/build-ts
5.15.105.17.0
npmams-ssk
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.111.0.121.0.131.0.141.0.151.0.161.0.171.0.181.0.191.0.201.0.211.0.221.0.231.0.241.0.251.0.261.0.271.0.281.0.291.0.311.0.33
npmcalvuepro
0.1.0
npmclavue
8.8.578.9.08.9.18.9.29.0.09.0.19.0.29.0.39.0.49.0.59.0.69.0.79.1.09.1.19.2.09.2.19.2.29.2.39.2.49.3.09.4.09.4.19.4.29.4.39.4.49.4.59.4.69.4.79.4.89.4.99.4.109.4.119.5.09.5.19.5.29.6.09.6.19.7.09.7.19.7.29.7.39.8.09.8.19.9.09.10.09.10.19.10.29.10.39.10.49.11.09.11.19.11.29.11.39.11.49.11.59.11.69.11.79.12.09.13.09.14.09.14.19.15.09.16.09.22.09.26.010.0.110.0.210.0.310.0.410.1.010.1.110.1.210.1.310.2.010.2.110.2.210.2.310.2.410.3.010.3.110.3.210.4.010.4.110.4.2
npmclavue-agent-sdk
0.2.20.2.30.2.40.2.50.2.60.2.70.2.80.2.90.3.00.3.10.4.00.5.00.6.00.6.10.7.00.7.10.7.20.7.30.7.40.8.00.9.01.0.11.0.21.0.31.0.41.0.51.0.62.0.02.2.0
npmclavuepro
1.0.0
npmcommon-tg-service
1.0.1011.1.991.2.1001.3.247
npmgas-log
1.1.01.1.1
npmkarem-dp
99.9.9
npmmci-sdk
1.2.81.2.91.2.101.2.111.2.121.2.13
npmmyclaude-code
8.8.88.8.98.8.118.8.128.8.138.8.148.8.168.8.178.8.188.8.198.8.208.8.218.8.228.8.238.8.248.8.258.8.268.8.278.8.288.8.308.8.318.8.328.8.338.8.348.8.358.8.378.8.388.8.398.8.408.8.418.8.428.8.43-beta.08.8.43-beta.18.8.43-beta.28.8.43-beta.38.8.43-beta.48.8.43-beta.58.8.43-beta.68.8.43-beta.78.8.43-beta.88.8.43-beta.98.8.43-beta.108.8.43-beta.118.8.448.8.458.8.468.8.478.8.488.8.498.8.508.8.518.8.528.8.538.8.548.8.558.8.568.8.57
npmna-rony
1.1.21.1.31.1.41.1.599.9.9
npmna-rony-test
99.9.9
npmna-rony-test-karem
1.0.0
npmnam-os-a-man
1.0.0
npmpromo-helper
1.0.01.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.131.0.141.0.151.0.16
npmrony-testing
99.9.9
npmtailwind-core
0.0.04.3.04.3.14.3.2
npmvite-json-pwa
1.1.11.1.2
npm-2026-07-08-ghsa-malware-sweepSource advisory
Critical8 Jul 2026
17 packages tracked
@injectivelabs/sdk-ts + 16 sibling packages compromised - wallet-key stealer shipped via GitHub maintainer takeover
On 2026-07-08 20:59 UTC an attacker with a compromised maintainer GitHub account published @injectivelabs/sdk-ts@1.20.21 and pinned the same 1.20.21 version across 16 sibling @injectivelabs/* wallet + core packages. The malicious release hooked fromMnemonic and fromHex with a trackKeyDerivation telemetry stub that base64-encoded stolen mnemonics/private keys and POSTed them to testnet.archival.chain.grpc-web.injective.network. Injective Labs replaced with 1.20.23 about 49 minutes later; 310 downloads shipped in the window.
npm
Affected packages17 packages · 17 versions
npm@injectivelabs/exceptions
1.20.21
npm@injectivelabs/networks
1.20.21
npm@injectivelabs/sdk-ts
1.20.21
npm@injectivelabs/ts-types
1.20.21
npm@injectivelabs/utils
1.20.21
npm@injectivelabs/wallet-base
1.20.21
npm@injectivelabs/wallet-core
1.20.21
npm@injectivelabs/wallet-cosmos
1.20.21
npm@injectivelabs/wallet-cosmos-strategy
1.20.21
npm@injectivelabs/wallet-evm
1.20.21
npm@injectivelabs/wallet-ledger
1.20.21
npm@injectivelabs/wallet-magic
1.20.21
npm@injectivelabs/wallet-private-key
1.20.21
npm@injectivelabs/wallet-strategy
1.20.21
npm@injectivelabs/wallet-trezor
1.20.21
npm@injectivelabs/wallet-turnkey
1.20.21
npm@injectivelabs/wallet-wallet-connect
1.20.21
npm-2026-07-08-injectivelabs-sdk-ts-crypto-wallet-drainSource advisory
High7 Jul 2026
62 packages tracked
GitHub Advisory malware sweep - ~65 npm packages (AI-SDK typosquat cluster, Solana base58/wallet drainers, SQLite scoped fakes, Nuxt/Chai continuation) taken down 2026-07-07 / 2026-07-08
On 2026-07-07 GitHub's Advisory Database retired ~65 CWE-506 Embedded Malicious Code npm advisories (plus a small 2-package 2026-07-08 tail), the second-largest single-day 2026 GHSA npm-malware sweep after 2026-07-06. Distinct clusters: an AI-SDK typosquat family (openai-agents-helpers, ollama-helpers, anthropic-toolkit, @langgraphjs/toolkit, ai-sdk-helpers, mcp-server-pg), Solana base58 wallet-drainer names, @sqlite-list/* / @sqlite-access/* throwaway scopes, Nuxt/Chai continuations, plus the whs4_* sextet.
npm
Affected packages62 packages · 212 versions
npm@43uh3ig43/telemetry-client
99.0.1
npm@apexcraft/nano-key
1.2.41.2.51.3.21.3.3
npm@aspect-security/argon2
1.0.01.0.1
npm@engagehub/core
99.0.0
npm@engagehub/test-claim
1.0.0
npm@langgraphjs/toolkit
1.2.13
npm@sqlite-access/nodesql
1.0.2
npm@sqlite-list/createsql
1.0.0
npm@sqlite-list/schema-generator
1.0.2
npm@sqlite-list/sql-creator
1.0.61.0.7
npmai-sdk-helpers
1.4.5
npmannotator-harvardx
9.0.2
npmanthropic-toolkit
1.3.1
npmbase58-cli
1.0.01.0.11.0.21.0.31.0.41.0.5
npmbase58-core
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.101.0.111.0.12
npmbrunomenozzi-test-pkg
1.0.0
npmchai-chain-dom
1.3.71.3.81.3.9
npmchai-sdk
1.4.71.4.8
npmchai-spycore
1.1.01.5.3
npmcrypto-base58
1.0.01.0.11.0.21.0.31.0.4
npmdebugcli
4.3.44.3.54.3.64.3.74.3.84.3.94.4.1
npmevm-typechain
0.5.4
npmexpress-deflect
1.3.11.6.91.6.101.6.12
npmexpress-firegate
1.3.51.4.01.4.51.4.61.5.11.5.51.6.11.6.31.6.51.6.71.6.81.6.9
npmgen-ai-opt-in
99.0.099.0.199.0.2
npmharmony-enablers-test-2026
1.0.0
npmhello244a
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.131.0.141.0.151.0.161.0.171.0.181.0.191.0.201.0.211.0.221.0.231.0.241.0.251.0.261.0.271.0.281.0.291.0.301.0.311.0.321.0.331.0.341.0.351.0.361.0.371.0.381.0.391.0.401.0.411.0.421.0.431.0.441.0.45
npmhook-augmenting-module
99.0.3
npmjsf-utils
0.3.11.3.1
npmload-nuxt
99.0.3
npmload-nuxt-dev
99.0.3
npmmcp-server-pg
0.1.00.1.10.1.20.1.30.2.00.2.10.3.00.3.10.4.00.5.00.6.00.7.00.8.00.9.01.0.01.0.11.1.01.1.11.2.01.2.11.2.2
npmnodemon-node
3.1.16
npmnonexistent-package
99.0.3
npmnotifier-utils
1.3.71.3.81.3.91.4.0
npmnuxt-fonts-devtools
99.0.3
npmollama-helpers
1.2.3
npmopenai-agents-helpers
1.3.3
npmpinokio-redis
1.0.127
npmpolytrade
2.4.1
npmrnx-align-deps
99.0.7
npmruntimedev-link
1.0.01.0.11.0.21.0.31.0.51.0.61.0.81.0.91.0.101.0.111.0.121.0.131.0.14
npmshopify-internel
99.0.1
npmsolana-address-codec
1.0.01.0.11.0.21.0.31.0.41.0.5
npmsome-theme
99.0.3
npmsyco1
1.0.31.0.41.0.5
npmsypoi1
1.0.01.0.11.0.2
npmtailwind-animator-scroll
1.7.0
npmtailwindcss-effector
1.7.0
npmts-await
3.1.8
npmtx-guard-snap
1.0.0
npmtypescript-base58
1.0.0
npmwarp-dependency
1.0.01.0.1
npmwhs4_nmp
1.0.01.0.1
npmwhs4_npm
1.0.0
npmwhs4_npm_test
1.0.01.0.11.0.21.0.3
npmwhs4_pnm
1.0.0
npmwsh4_npm
1.0.0
npmwsh4-nmp
1.0.0
npmzod-pino434
1.0.1271.0.128
npmzod-pino444
1.0.1281.0.1291.0.1301.0.131
npmzredis-typed
1.0.127
npm-2026-07-07-ghsa-malware-sweepSource advisory
Critical7 Jul 2026
10 packages tracked
Coordinated npm + PyPI campaign typosquats Paysafe / Skrill / Neteller payment SDKs, exfiltrates keys to AWS
Socket detected a coordinated cross-registry campaign on 2026-07-07 12:56 UTC: 13 npm and 4 PyPI packages impersonating the Paysafe / Skrill / Neteller payment SDKs, exposing plausible legitimate APIs but shipping a credential-theft module that harvests KEY / SECRET / TOKEN / PASS / AUTH / API env vars and Paysafe API keys and exfiltrates them to attacker-controlled AWS infrastructure. All npm versions unpublished ~2026-07-08 00:25 UTC.
npmPyPI
Affected packages12 packages · 39 versions
npmpaysafe-api
1.0.01.0.11.0.21.0.3
PyPIpaysafe-api
1.0.0
npmpaysafe-cards
1.0.01.0.11.0.21.0.3
npmpaysafe-checkout
1.0.01.0.11.0.21.0.3
npmpaysafe-js
1.0.01.0.11.0.21.0.3
npmpaysafe-node
1.0.01.0.11.0.21.0.3
npmpaysafe-payments
1.0.01.0.11.0.21.0.3
PyPIpaysafe-payments
1.0.0
PyPIpaysafe-sdk
1.0.0
npmpaysafe-vault
1.0.01.0.11.0.21.0.3
npmskrill-payments
1.0.01.0.11.0.21.0.3
npmskrill-sdk
1.0.01.0.11.0.21.0.3
multi-2026-07-07-paysafe-skrill-payment-sdk-typosquatSource advisory
High6 Jul 2026
162 packages tracked
GitHub Advisory malware sweep - ~155 npm packages (logger/tailwind/eslint/bignumber typosquats, polymarket-onchain-* crypto-drainers) taken down 2026-07-06
On 2026-07-06 GitHub's Advisory Database published ~155 CWE-506 Embedded Malicious Code advisories against npm packages - the largest single-day 2026 GHSA npm-malware sweep to date. The batch clusters into six naming families: chalk/pino/winston/*-logger pretty-print typosquats, tailwindcss/vite typosquats, eslint / *-lint-* helper squats, bignumber.js / crypto-math typosquats, chai *-as-* matcher squats, and two polymarket-onchain-* crypto-drainer slugs continuing the June cluster. npm replaced every name with 0.0.1-security.
npm
Affected packages162 packages · 429 versions
npm@jaime9008/math-service
1.0.01.0.11.0.2
npmargonflux
2.0.1
npmawesome-cli-logger
1.0.01.2.0
npmbig-numer
5.0.5
npmbig-numerate
5.0.3
npmbig-numerator
5.0.35.0.6
npmbig256-ts
5.0.35.0.4
npmbigint.fs
5.0.55.0.6
npmbigint.os
5.0.55.0.65.0.75.0.8
npmbjs-biginteger
5.0.55.0.6
npmbjs-lint-builder
1.0.5
npmbjs-lint-builders
1.0.41.0.51.1.0
npmbn-eslint.js
8.0.5
npmbn-math
1.0.01.0.1
npmbootstrap-utils
4.5.05.1.1
npmbtd-smart
1.0.21.0.3
npmbubblestr
1.1.4
npmbytecore
5.3.1
npmchai-as-decrypted
4.2.8
npmchai-as-init
1.4.51.4.61.4.77.0.6
npmchai-as-polished
7.0.8
npmchai-dec
2.3.5
npmchai-guard
1.0.01.2.3
npmchain-await-test
1.3.5
npmchalk-logger-prettier
1.0.11.0.21.0.31.0.41.0.51.0.71.0.8
npmchalk-plus-ts
1.0.31.0.4
npmchalk-prettier
1.0.81.0.9
npmchalk-pro-logger
1.1.11.1.2
npmchalki-pretty
1.0.0
npmchalks-logger
1.0.91.1.01.1.11.1.21.1.3
npmcjs-biginteger
5.0.35.0.55.0.6
npmclassbreeze-utils
0.7.70.7.80.7.90.7.10
npmcolor-cli-log
2.0.02.1.0
npmcolor-logger-console
3.1.83.1.9
npmcompetion
1.8.11.8.21.8.31.8.4
npmcookie-ease
1.0.01.0.51.0.61.0.71.0.81.0.91.1.11.1.21.1.31.1.5
npmcustom-log-viewer
1.0.0
npmdb-query-log
1.0.11.0.2
npmdebug-glitzs
1.0.01.0.11.0.21.0.31.0.4
npmdevkit-scripts
1.0.01.0.3
npmdf-vision
0.0.11.1.701.1.711.1.721.1.731.1.741.1.751.1.761.1.771.1.781.1.79
npmdotenv-express
2.5.517.4.217.4.317.4.417.4.517.4.6
npmelevate-log
2.0.5
npmemojiprint-logger
1.1.05.6.2
npmemojiprint-prettier
1.0.9
npmenv-axios
1.3.6
npmenvironment-gate
7.3.57.3.6
npmes-lint-builders
1.0.01.0.31.0.41.0.5
npmes-lint-entry
1.0.0
npmeslint-helper
4.0.14.0.2
npmeslint-vite
1.0.01.0.11.0.2
npmeth-logger
4.3.204.3.21
npmeth-tick
7.4.177.4.18
npmether-bn.js
1.0.01.0.31.1.11.2.11.3.11.3.31.3.41.4.01.4.1
npmexpress-dotenv
1.3.5
npmexpress-guardrail
1.3.51.4.1
npmexpress-initial
12.1.712.1.812.1.912.1.10
npmexpress-session-js
1.0.01.19.0
npmfastnodemailer
8.0.28.0.38.0.4
npmgraphpilot
0.1.00.1.10.1.20.1.30.1.41.0.0
npmgrid-settings-align
14.1.114.1.2
npmhjs-biginteger
5.0.5
npmhjs-lint-builders
1.0.4
npmjs-crypto-promise
1.0.1
npmjs-unimode
1.1.11.1.21.1.31.1.41.1.51.1.61.1.71.1.81.1.91.1.10
npmjsontoken-extend
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.13
npmjsonupper
1.0.05.1.0
npmlint-builders
1.0.0
npmlint-builds
1.0.01.0.5
npmlint-nule
1.0.4
npmlint-nuler
1.0.4
npmlint-null
1.0.4
npmlinter-entry
1.0.0
npmlog-format-thread
1.0.01.0.1
npmlog-upgrade
7.1.0
npmlogger-beauty
1.0.11.0.21.0.31.1.02.1.1
npmmetrica-chain
2.4.5
npmmetrica-node
2.4.5
npmmjs-biginteger
5.0.55.0.6
npmmodulyn
1.0.1
npmmongoose-json-format
3.0.03.0.1
npmmongoose-lean-hooks
0.5.20.5.30.5.40.5.50.5.60.5.7
npmmotion-lib
2.3.5
npmnext-bignumber.js
1.0.0
npmnode-env-detector
1.0.01.0.1
npmnodepathbalance54
1.1.0
npmnormalize-path-seq
3.8.9
npmnpm-doc-dev
1.0.41.0.51.0.61.0.71.0.81.0.91.1.01.1.1
npmnpm-eslint-helper
1.0.1
npmolder_morgan
1.0.11.0.2
npmpeptideenv
16.6.116.6.216.6.316.6.416.6.516.6.6
npmpicocolor-logger
1.0.01.0.11.0.2
npmpino-formatter
1.1.121.1.13
npmpino-pretty-logs
1.0.71.0.81.1.02.0.0
npmpino-sdk-v2
9.9.0
npmpino-utils
1.3.61.4.0
npmpolymarket-onchain-plugin
2.1.32.1.42.1.5
npmpolymarket-onchain-sdk
1.0.21.0.31.0.4
npmprettier-logger
0.1.40.1.50.1.6
npmpretty-pino-logger
1.0.01.0.11.0.21.0.31.0.42.0.12.0.2
npmpretty-pino-loggers
1.0.1
npmrandom-string-64
1.0.01.0.1
npmreact-check-error
2.1.62.1.7
npmreact-native-template-my-starter
1.0.0
npmreact-next-dom
1.0.01.1.717.2.717.2.8
npmreact-svg-render
1.0.2
npmrenderctx
1.1.1
npmrequest-js-validator
1.0.21.0.31.0.4
npmrma-utils
1.0.1
npmrollup-plugin-polyfill-handler
1.0.01.0.1
npmrouter-kit
0.1.10.1.20.1.30.1.40.1.50.1.60.1.70.2.00.2.10.2.20.2.30.2.51.0.01.0.11.0.21.0.31.2.01.2.11.2.21.2.31.2.41.2.51.2.61.3.01.3.11.3.21.3.31.3.42.0.02.0.12.1.0
npmsafe-validate
1.0.11.0.21.0.31.0.4
npmsecure-box
1.0.11.0.2
npmset-proto-chain
1.0.3
npmsjs-biginteger
5.0.55.0.6
npmsjs-builder
1.0.41.0.5
npmsjs-builders
1.0.4
npmsjs-lint-build1
1.0.4
npmsleek-pretty
1.0.0
npmsol-sdk
2.3.18
npmst-biginteger
5.0.5
npmst-bigintr
5.0.55.0.6
npmstacknova
1.0.0
npmstyled-text-logger
1.3.1
npmsubsearch
1.0.21.0.3
npmsyncora
0.2.03.5.7
npmtailstyle-core
0.0.1
npmtailwind-fonttype-inter
2.3.2
npmtailwind-scroller
1.0.2
npmtailwind-typography-plus
2.1.0
npmtailwindcss-animatecss-latest
2.1.02.1.1
npmtailwindcss-fonttype-inter
2.3.12.3.2
npmtailwindcss-fonttypo-inter
2.3.2
npmtailwindcss-framer-motion
1.1.3
npmtailwindcss-svg-helper
1.17.91.18.0
npmtest-prettier
1.0.9
npmtheta-connector
1.0.0
npmtheta-kit
1.0.01.0.11.0.21.0.3
npmts-bigtn
1.3.11.3.2
npmts-build-optimize
1.1.51.1.61.2.01.2.11.2.2
npmts-eslint-helper
4.0.14.0.24.0.34.0.44.0.5
npmts-eslinter
1.0.0
npmts-lint-builders
1.0.5
npmts-lint-builds
1.0.5
npmts-relayer-pub
1.0.0
npmts-webplug
3.0.53.0.63.0.73.0.8
npmtsliverhome
1.0.01.1.11.1.21.1.31.1.41.1.5
npmtwcompose-utils
0.7.60.7.7
npmtxs-data
1.0.1
npmtypedecode
1.0.11.0.21.0.3
npmunique-id-64
1.0.0
npmvite-config-field
1.1.01.1.11.1.21.1.31.1.41.1.5
npmvite-plugin-compress-js
0.5.40.5.50.5.60.5.7
npmvite-plugin-svg-paths
1.1.51.1.61.1.71.1.81.1.9
npmweb-pool
2.3.5
npmwebpack-cache-clean
0.1.4
npmwebpack-patch
1.1.71.1.81.1.91.2.0
npmwime-zle
1.1.4
npmwindrule-utils
0.0.1
npmwinston-js-express
1.0.01.0.31.0.41.0.51.0.61.0.71.1.11.1.2
npmwinston-prism
1.0.1
npmxnder-sdk-js
0.1.0
npm-2026-07-06-ghsa-malware-sweepSource advisory
High4 Jul 2026
5 packages tracked
paperclip2 / vps-maintenance postinstall reverse shell to 185.112.147.174:7007
On 2026-07-04 the OX Research team disclosed npm packages - paperclip2, vps-maintenance, vps-maintenance-paperclip-adapter - published by user srm0rgan that hide a postinstall reverse shell to 185.112.147.174:7007 inside package.json. paperclip2 ships with no JavaScript files at all, defeating static scanners that only inspect .js. Two follow-on names - paperclip-host-utils and vps-adapter-core - landed 2026-07-07 and joined the same GHSA takedown.
npm
Affected packages5 packages · 14 versions
npmpaperclip-host-utils
1.0.01.0.21.0.31.0.41.0.51.0.61.0.7
npmpaperclip2
1.0.0
npmvps-adapter-core
1.0.01.0.11.0.2
npmvps-maintenance
0.1.0
npmvps-maintenance-paperclip-adapter
0.1.10.1.2
npm-2026-07-04-paperclip2-reverse-shellSource advisory
High3 Jul 2026
14 packages tracked
GitHub Advisory malware sweep - 14 npm packages (TypeScript/API util family, SQL/node-cloud scoped cluster, `@lodash-en` typosquat) taken down 2026-07-03
On 2026-07-03 GitHub's Advisory Database dropped 14 CWE-506 Embedded Malicious Code advisories against npm packages, all retired inside a ~30-minute window (15:36–16:06 UTC). The sweep spans three distinct micro-clusters: an unscoped *-node-utils / *-api-* TypeScript/API-helper family (5 packages, 20+ versions), a SQL-and-cloud scoped cluster on personal namespaces (@sql-access/, @sqlite-node/, @sql-trigger/, @node-cloud/), and three miscellaneous typosquats including @lodash-en/lodash-en. npm replaced every name with 0.0.1-security.
npm
Affected packages14 packages · 73 versions
npm@antoncarlos1/nodelamp
1.0.01.0.1
npm@jacobtan/decode-sdk
1.0.0
npm@lodash-en/lodash-en
1.4.111.5.0
npm@node-cloud/create
1.0.01.0.11.0.21.0.31.0.41.0.51.0.6
npm@sql-access/nodesql
1.0.01.0.31.0.51.0.61.0.71.0.81.0.91.1.01.1.11.1.21.1.31.1.41.1.51.1.61.1.71.1.81.1.9
npm@sql-trigger/nodesql
1.0.01.0.11.0.2
npm@sqlite-node/createsql
1.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.1.01.1.11.1.21.1.31.1.41.1.51.1.7
npmalder_morrgan
1.0.01.0.1
npmapi-node-utils
2.2.4
npmapi-ts-utils
1.0.02.1.32.1.43.2.13.2.23.4.73.4.83.4.93.5.9
npmdecode-sdks
1.0.01.0.11.0.21.0.3
npmts-node-utils
8.0.18.0.48.0.6
npmtypescript-util-core
3.5.07.1.37.1.57.1.6
npmweb-api-node
1.3.21.3.3
npm-2026-07-03-ghsa-malware-sweepSource advisory
Critical3 Jul 2026
6 packages tracked
JFrog: Lazarus / OtterCookie `rollup-*-polyfill-core` npm campaign - 6 packages steal AI-coder credentials, browser data and crypto wallets
JFrog Security Research disclosed a 6-package DPRK / Contagious Interview npm campaign that mimics the legitimate rollup-plugin-polyfill-node project down to its metadata. First-stage packages carry a base64-encoded npm install that fetches an SVG-utility-shaped second stage; the second stage evaluates a payload pulled from JSONKeeper and steals credentials for AWS, Azure, Google Gemini, Anthropic Claude, Windsurf, Cursor, VS Code, SSH and Zsh, plus browser data and crypto wallets. Two of the first-stage packages are STILL live on npm as of 2026-07-04.
npm
Affected packages6 packages · 37 versions
npmquirky-token
1.0.01.0.11.0.2
npmreact-icon-svgs
1.0.01.0.11.0.22.15.3
npmrollup-packages-polyfill-core
0.0.00.5.00.12.30.13.00.13.10.13.20.13.30.13.40.13.50.13.60.13.70.13.8
npmrollup-plugin-polyfill-connect
1.0.11.0.21.0.3
npmrollup-runtime-polyfill-core
0.0.10.12.50.13.00.13.10.13.20.13.30.13.40.13.50.13.60.13.70.13.80.13.90.14.0
npmswift-parse-stream
1.0.01.0.2
npm-2026-07-03-jfrog-lazarus-rollup-polyfill-ottercookieSource advisory
High2 Jul 2026
9 packages tracked
GitHub Advisory malware sweep - 9 npm packages (tailwind/animate typosquats, db-* cluster, `vitest-agent`) taken down 2026-07-02
On 2026-07-02 GitHub's Advisory Database dropped 9 CWE-506 Embedded Malicious Code advisories against npm packages published between 2026-05-24 and 2026-07-01. Three distinct micro-clusters were retired within minutes of each other: a Tailwind/animate typosquat trio (animatecss-postcss-plugin, tailwind-animates, tailwind-typography-stylecss), a db-* / cache-* fake-utility quartet, and the standalone vitest-agent Vitest typosquat plus one scoped React Native template. npm replaced every name with a 0.0.1-security holding tarball.
npm
Affected packages9 packages · 22 versions
npm@modhamanish/rn-mm-template
1.0.11.0.21.0.31.0.41.0.51.1.01.1.11.1.21.1.3
npmanimatecss-postcss-plugin
1.0.01.0.1
npmcache-section-helper
1.0.7
npmdb-connector-log
1.0.01.0.1
npmdb-convertor
1.0.5
npmdb-plog
1.0.01.0.1
npmtailwind-animates
1.0.1
npmtailwind-typography-stylecss
0.8.3
npmvitest-agent
1.0.01.0.51.0.6
npm-2026-07-02-ghsa-malware-sweepSource advisory
High1 Jul 2026
3 packages tracked
`clx-cookieparser` + `clx-cookie-signature` cookie-parser impersonators - DGA-driven RAT dropper cluster (GHSA dropped 2026-06-29, updated 2026-07-01)
clx-cookieparser (7 versions 1.4.4–1.5.1) and clx-cookie-signature@1.2.1 impersonate Express's cookie-parser / cookie-signature. Both hide a dropper that XOR-derives a C2 IP from key 0x496AAC7E, then fetches and evals startup.js - no install hook, execution fires on first API call. GHSA-jpg2-3r22-63v7 / GHSA-vwwm-x6xj-cfmf, refreshed 2026-07-01.
npm
Affected packages3 packages · 14 versions
npmclx-cookie-signature
1.2.1
npmclx-cookieparser
1.4.41.4.51.4.61.4.71.4.81.4.91.5.1
npmexpress-cookie-parser
1.4.71.4.81.4.91.4.101.4.111.4.12
npm-2026-07-01-clx-cookie-dga-dropperSource advisory
High1 Jul 2026
8 packages tracked
`@marketfront` dependency-confusion Wave 4 - 25 npm packages batch-published at `7.0.0` reuse the "Internal package - Platform Engineering Team" lure
On 2026-07-01 22:59 UTC the npm account marketfront created the @marketfront scope and batch-published 25 e-commerce / marketing-frontend packages in a ~3-minute window, all at version 7.0.0. Every package carries a postinstall credential-file harvester (~20 secret files including ~/.ssh, ~/.aws/credentials, ~/.kube/config, ~/.npmrc, ~/.env) and the identical README lure "Internal package - Platform Engineering Team" - Wave 4 of the SafeDep-tracked oob.moika.tech operator lineage.
npm
Affected packages8 packages · 8 versions
npm@marketfront/bannerpopup
7.0.0
npm@marketfront/customdealsfeed
7.0.0
npm@marketfront/designsystemdevtool
7.0.0
npm@marketfront/fashiononboardingpopup
7.0.0
npm@marketfront/footer
7.0.0
npm@marketfront/header
7.0.0
npm@marketfront/livestreampreviewpopup
7.0.0
npm@marketfront/navbar
7.0.0
npm-2026-07-01-marketfront-dep-confusion-wave4Source advisory
High1 Jul 2026
4 packages tracked
ChocoPoC - trojanized CVE PoC repos deliver ChocoPoC RAT via malicious PyPI packages frint / skytext (Mapbox dataset dead-drop C2)
Joint Sekoia / YesWeHack disclosure on 2026-07-01: at least seven trojanized CVE proof-of-concept repositories on GitHub silently pull the malicious PyPI package frint, which depends on skytext. skytext ships a precompiled native extension (gradient.so / gradient.pyd) that deploys "ChocoPoC" - a Python RAT with shell/Python command execution, browser-credential theft, and Mapbox Dataset API dead-drop C2. Targets vulnerability researchers and pentesters cloning PoC repos. ~2,400 downloads of skytext before takedown.
PyPI
Affected packages4 packages · 0 versions
PyPIfrint
PyPIlogcrypt.cryptography
PyPIskytext
PyPIslogsec
pypi-2026-07-01-chocopoc-frint-skytextSource advisory
High30 Jun 2026
18 packages tracked
GitHub Advisory malware sweep - 20+ npm packages (chai-as-*, brock-*, rebrandly-*, dep-confusion + typosquat batch) taken down 2026-06-30
On 2026-06-30 GitHub's Advisory Database dropped a coordinated batch of ~25 CWE-506 Embedded Malicious Code advisories against unrelated npm packages published between 2026-05-27 and 2026-06-30. The batch mixes at least four distinct sub-clusters: chai-as-persisted / chai-as-assured (Chai typosquats), brock-loader / brock-react-alerts (with a 9999.0.0 dep-confusion tag), the rebrandly-domains-* pair (both 9999.0.0), and a wider fan-out of standalone malicious names.
npm
Affected packages18 packages · 43 versions
npmagent-starter-pack
0.0.1
npmbrock-loader
1.9.9
npmbrock-react-alerts
1.99.999999.0.0
npmchai-as-assured
6.0.47.1.2
npmchai-as-persisted
4.2.86.1.9
npmconfluent-kafka-javascript
0.0.1
npmendpointmap
2.1.03.0.0
npmnbmolviz-js
0.0.1
npmpostcss-property-rollup
0.0.1
npmprocwire
1.3.02.0.0
npmquoting
0.1.0
npmrebrandly-domains-digger
9999.0.0
npmrebrandly-domains-search-client
9999.0.0
npmrs-biginteger
6.1.36.1.5
npmsetup-cicd
0.0.1
npmterminal-prettier
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.1.01.1.11.1.21.1.31.1.41.1.51.1.61.1.71.1.81.1.9
npmts-lint-builders-v2.1
2.1.0
npmts-linting-builder
2.1.2
npm-2026-06-30-ghsa-malware-sweepSource advisory
High30 Jun 2026
21 packages tracked
GHSA-flagged malware brands - 16 autotel-*, 4 awaitly-*, and `ai-sdk-ollama` packages (Nov 2025–Jun 2026) marked embedded-malicious-code on 2026-06-29/30
GitHub's Advisory Database dropped CWE-506 (Embedded Malicious Code) records on 2026-06-29 and 2026-06-30 against 21 npm "brand" packages built up over months: the entire autotel-* observability family (16 packages, 400+ versions), the awaitly promise-utility family (4 packages, ~180 versions), and the ai-sdk-ollama Vercel AI-SDK typosquat (55 versions). Every published version of every listed package is now classified as malware.
npm
Affected packages21 packages · 939 versions
npmai-sdk-ollama
0.1.00.2.00.3.00.4.00.5.00.5.10.5.20.5.30.5.40.5.50.6.00.6.10.6.20.7.00.8.00.8.10.9.00.10.00.10.10.11.00.12.00.13.00.13.11.0.01.0.11.0.21.1.01.1.12.0.02.0.12.1.02.2.02.2.13.0.03.0.13.1.03.1.13.2.03.3.03.4.03.5.03.6.03.7.03.7.13.8.03.8.13.8.23.8.33.8.43.8.53.8.63.8.73.8.84.0.04.0.0-beta.0
npmautotel-backends
2.0.12.1.02.2.02.2.12.2.22.2.32.2.42.2.52.2.62.3.02.3.12.4.02.4.12.5.02.5.12.6.02.7.02.7.12.7.22.8.02.8.12.8.22.8.32.8.42.9.02.9.12.10.02.11.02.11.12.11.22.11.32.11.42.12.02.12.12.12.22.12.32.12.42.12.52.12.62.12.72.12.82.12.92.12.102.12.132.12.142.12.152.12.162.12.172.12.182.12.192.12.202.12.212.12.222.12.232.12.242.12.252.12.262.12.272.12.282.12.292.12.302.12.312.12.322.12.332.12.342.12.352.12.36
npmautotel-cli
0.1.00.4.00.4.10.4.20.5.00.6.00.7.00.7.10.8.00.8.10.8.20.8.30.8.40.8.60.8.70.8.80.8.90.8.100.8.110.8.120.8.130.8.140.8.150.9.00.9.10.10.00.11.0
npmautotel-drizzle
0.0.10.0.20.0.30.0.40.0.50.0.60.0.70.0.80.0.90.0.100.0.110.0.140.0.150.0.160.0.170.0.180.0.190.0.200.0.210.0.220.0.230.0.240.0.250.0.260.0.270.0.280.0.290.0.300.0.310.0.320.0.330.0.340.0.350.0.360.0.37
npmautotel-eventcatalog
1.0.01.0.12.0.02.0.13.0.03.0.14.0.04.0.14.0.25.0.05.0.15.0.26.0.07.0.08.0.09.0.010.0.011.0.0
npmautotel-hono
0.1.00.1.10.1.20.2.00.3.00.3.10.3.20.3.30.3.40.4.00.4.10.4.20.4.30.4.40.4.50.4.60.4.70.4.80.4.90.4.100.4.130.4.140.4.150.4.160.4.170.4.180.4.190.4.200.4.210.4.220.4.230.4.240.4.250.4.260.4.270.4.280.4.290.4.300.4.310.4.320.4.330.4.340.4.350.4.36
npmautotel-mcp
0.1.10.1.20.1.30.1.40.1.70.1.80.1.90.1.100.1.110.1.120.1.130.1.140.1.150.1.162.0.02.0.13.0.03.0.14.0.04.0.15.0.05.0.16.0.06.0.17.0.07.0.18.0.08.0.19.0.09.0.110.0.010.0.111.0.011.0.113.0.013.0.114.0.014.0.115.0.015.0.115.0.216.0.016.0.117.0.017.0.117.0.218.0.018.0.119.0.019.0.120.0.020.0.121.0.021.1.021.1.122.0.022.0.123.0.023.0.124.0.024.0.125.0.025.0.126.0.026.0.126.0.227.0.027.0.128.0.028.0.128.0.228.0.329.0.029.0.1
npmautotel-mcp-instrumentation
29.0.029.0.129.0.230.0.030.0.330.0.430.0.531.0.031.0.132.0.032.0.133.0.033.0.133.0.234.0.034.0.134.0.235.0.036.0.037.0.038.0.039.0.040.0.0
npmautotel-mongoose
0.0.10.0.20.0.31.0.01.0.11.0.22.0.02.0.32.0.42.0.53.0.03.0.14.0.04.0.15.0.05.0.15.0.26.0.06.0.16.0.27.0.08.0.08.1.09.0.010.0.010.1.010.1.111.0.012.0.0
npmautotel-pact
0.2.00.2.10.2.21.0.01.0.11.0.21.0.31.0.42.0.03.0.04.0.05.0.06.0.07.0.07.0.17.0.2
npmautotel-playwright
0.1.00.2.00.2.10.3.00.4.00.4.10.4.20.4.30.4.40.4.50.4.60.4.70.4.80.4.90.4.100.4.110.4.120.4.130.4.140.4.150.4.160.4.190.4.200.4.210.4.220.4.230.4.240.4.250.4.260.4.270.4.280.4.290.4.300.4.310.4.320.4.330.4.340.4.350.4.360.4.370.4.380.4.390.4.400.4.410.4.42
npmautotel-plugins
0.4.00.5.00.6.00.6.10.6.20.6.30.6.40.6.50.6.60.7.00.7.10.8.00.8.10.9.00.9.10.10.00.11.00.11.10.11.20.12.00.12.10.13.00.14.00.14.10.15.00.15.10.16.00.17.00.18.00.18.10.18.20.18.30.19.00.19.10.19.20.19.30.19.40.19.50.19.60.19.70.19.80.19.90.19.100.19.130.19.140.19.150.19.160.19.170.19.180.19.190.19.200.19.210.19.220.19.230.19.240.19.250.19.260.19.270.19.280.19.290.19.300.19.310.19.320.19.330.19.340.19.350.19.36
npmautotel-sentry
0.1.00.1.10.1.20.2.00.3.00.4.00.4.10.4.20.4.30.5.00.5.10.5.20.5.30.5.40.5.50.5.60.5.70.5.80.5.100.5.110.5.120.5.130.5.140.5.150.5.160.5.17
npmautotel-subscribers
4.0.04.1.04.1.15.0.05.0.16.0.06.0.17.0.07.0.18.0.08.0.19.0.09.0.110.0.010.0.111.0.011.0.112.0.012.0.113.0.013.0.114.0.014.1.014.1.115.0.015.0.116.0.016.0.116.0.217.0.017.0.118.0.018.0.118.0.218.0.319.0.019.0.120.0.020.0.121.0.021.0.122.0.022.0.122.0.223.0.023.0.123.0.224.0.024.0.125.0.025.0.126.0.026.0.127.0.027.0.127.0.228.0.028.0.128.0.229.0.029.0.129.0.229.0.329.0.429.0.529.0.630.0.030.0.130.0.230.0.330.0.431.0.031.0.331.0.431.1.031.1.131.1.231.1.331.1.432.0.032.0.132.1.033.0.034.0.034.1.034.1.135.0.035.0.135.0.236.0.037.0.038.0.039.0.040.0.041.0.041.0.141.0.2
npmautotel-tanstack
1.1.01.2.01.2.11.4.01.4.11.4.21.5.01.5.11.6.01.7.01.7.11.7.21.8.01.8.11.8.21.8.31.8.41.9.01.9.11.10.01.11.01.12.01.12.11.12.21.12.31.13.01.13.11.13.21.13.31.13.41.13.51.13.61.13.71.13.81.13.91.13.101.13.111.13.141.13.151.13.161.13.171.13.181.13.191.13.201.13.211.13.221.13.231.13.241.13.251.13.261.13.271.13.281.13.291.13.301.13.311.13.321.13.331.13.341.13.351.13.361.13.371.13.38
npmautotel-vitest
0.1.00.2.00.3.00.3.10.3.20.3.30.3.40.3.50.4.00.4.10.4.20.4.30.4.40.4.50.4.60.4.70.4.80.4.90.4.100.4.130.4.140.4.150.4.160.4.170.4.180.4.190.4.200.4.210.4.220.4.230.4.240.4.250.4.260.4.270.4.280.4.290.4.300.4.310.4.320.4.330.4.340.4.350.4.36
npmautotel-web
1.1.01.2.01.4.01.4.11.5.01.6.01.6.11.7.01.7.11.8.01.9.01.10.01.10.11.11.01.11.11.11.21.11.51.11.61.12.01.12.11.12.21.12.31.12.41.12.5
npmawaitly
1.0.01.1.01.2.01.3.01.4.01.5.01.5.11.6.01.7.01.8.01.9.01.10.01.11.01.12.01.13.01.14.01.15.01.16.01.17.01.18.01.19.01.20.01.21.01.22.01.23.01.24.01.25.01.26.01.27.01.28.01.29.01.30.01.31.01.31.11.32.01.32.11.33.01.33.11.33.21.33.31.33.41.34.0
npmawaitly-analyze
0.10.10.11.00.12.00.12.10.12.20.13.00.14.00.14.10.15.00.16.00.17.00.18.00.19.00.20.00.21.00.22.00.22.10.23.00.23.10.23.20.23.40.24.00.24.10.24.20.24.30.25.00.25.11.0.01.1.01.1.12.0.02.0.13.0.03.0.14.0.04.0.15.0.05.0.16.0.06.0.17.0.07.0.18.0.08.0.1
npmawaitly-libsql
0.1.00.1.11.0.01.0.12.0.02.0.13.0.03.0.14.0.04.0.15.0.05.0.16.0.06.0.17.0.07.0.18.0.08.0.19.0.09.0.110.0.010.0.111.0.011.0.112.0.012.0.113.0.013.0.114.0.014.0.115.0.015.0.116.0.016.0.117.0.017.0.118.0.018.1.018.1.119.0.019.0.120.0.020.0.121.0.021.0.122.0.022.0.122.0.223.0.0
npmawaitly-mongo
0.1.00.1.11.0.01.0.12.0.02.0.13.0.03.0.14.0.04.0.15.0.05.0.16.0.06.0.17.0.07.0.18.0.08.0.19.0.09.1.09.1.110.0.010.0.111.0.011.0.112.0.012.0.113.0.013.0.114.0.014.0.115.0.015.0.116.0.016.0.117.0.017.0.118.0.018.0.119.0.019.1.019.1.120.0.020.0.121.0.021.0.122.0.022.0.123.0.023.0.123.0.224.0.0
npm-2026-06-30-autotel-awaitly-brand-takedownSource advisory
High29 Jun 2026
10 packages tracked
Internal-scope dependency-confusion cluster (Deel, Webda, Citi, BSCom, TiVo, CSEO-HR, +) taken down 2026-06-29
Between 2026-04-27 and 2026-05-31, ten npm packages impersonating internal corporate scopes - Deel, Webda, Citi ICG, BSCom, TiVo, CSEO-HR, Concerns, Via City Tools, WM - were published at 99.9.1 to win dependency-confusion resolution against the matching private mirrors. npm support unpublished the whole batch on 2026-06-29 between 16:46 and 16:52 UTC and replaced them with 0.0.1-security holders; GHSA records dropped the same day.
npm
Affected packages10 packages · 10 versions
npm@bscom/styling
99.9.1
npm@citi-icg-171632/citicms-repo-component
99.9.1
npm@concerns/i18n
99.9.1
npm@cseo-hr/trpweb-shared
99.9.1
npm@deel-ui/animation
99.9.1
npm@webd-infra/query-designer-domain
99.9.1
npm@webda-infra-ui/static-images
99.9.1
npmtivo-codelib-a
99.9.1
npmvia-city-tools-m-particle
99.9.1
npmwm-mapper
99.9.1
npm-2026-06-29-internal-scope-dep-confusion-clusterSource advisory
High28 Jun 2026
3 packages tracked
`@thone33/core-utils` + `@thone33/analytics-injector` + `@thone33/react-helpers` - production-gated c2-stager loader fetched from a GitHub repo
On 2026-06-28 17:08–17:42 UTC the npm account thone33 (gptconta847@gmail.com) published three collaborating packages: @thone33/analytics-injector (1.0.0, 1.0.1) that fetches attacker JavaScript from raw.githubusercontent.com/Dennisfrr/c2-stager/main/the%20assessment.js and passes the response directly to eval; @thone33/core-utils (1.0.0–1.0.5) that depends on @thone33/analytics-injector: ^1.0.0 and conditionally activates it only when NODE_ENV === 'production'; and the newly-catalogued sibling @thone33/react-helpers (1.0.0–1.0.4, backfilled by GHSA on 2026-07-27, GHSA-vxmg-ff8j-2552). All three security-replaced on 2026-07-27 01:29–01:30 UTC.
npm
Affected packages3 packages · 13 versions
npm@thone33/analytics-injector
1.0.01.0.1
npm@thone33/core-utils
1.0.01.0.11.0.21.0.31.0.41.0.5
npm@thone33/react-helpers
1.0.01.0.11.0.21.0.31.0.4
npm-2026-06-28-thone33-c2-stager-clusterSource advisory
High27 Jun 2026
6 packages tracked
`chai-as-persisted` + `chai-as-assured` - jsonspack DPRK campaign restarts with chai-as-* typosquat install-time RCE dropper
On 2026-06-26 → 2026-06-28 the same DPRK-linked operator behind the March jsonspack npm campaign restarted with chai-as-persisted and chai-as-assured - typosquats of chai-as-promised that ship install-time RCE droppers. Four versions across the two packages were published with the same hello@jsonspack.com author bug URL, fetching attacker JavaScript from ipregionchecker.org via new Function.constructor on every npm install.
npm
Affected packages6 packages · 15 versions
npmchai-as-assured
7.1.26.0.4
npmchai-as-const
1.4.51.4.61.4.7
npmchai-as-persisted
4.2.86.1.9
npmchai-as-reddit
7.0.27.0.37.0.4
npmchai-as-thread
7.0.8
npmchai-leaf
1.4.51.4.61.4.71.4.8
npm-2026-06-27-chai-as-persisted-jsonspackSource advisory
High27 Jun 2026
2 packages tracked
`crossmint-wallets-sdk` + `@epsteinlovekids483/crossmint-wallets-sdk-pentest` - install-time wallet/credential exfil via Crossmint SDK impersonators
Between 2026-06-26 13:44 UTC and 2026-06-27 03:09 UTC the npm account epsteinlovekids483 published two impersonators of the legitimate @crossmint/wallets-sdk: a scoped @epsteinlovekids483/crossmint-wallets-sdk-pentest (8 rapid versions) that on require() exfiltrates AWS keys, SSH keys, npm tokens, gh auth token, and Solana keypairs to a 127.0.0.1:8052/exfil loopback C2; and the unscoped crossmint-wallets-sdk@1.0.0 that fires preinstall and install lifecycle scripts to capture host identifiers and POST them to an attacker-controlled endpoint. Both are flagged by CIRCL as MAL-2026-6522 and MAL-2026-6545.
npm
Affected packages2 packages · 9 versions
npm@epsteinlovekids483/crossmint-wallets-sdk-pentest
1.0.0-pentest1.0.1-pentest1.0.2-pentest1.0.5-pentest1.0.7-pentest1.0.9-pentest1.0.11-pentest1.0.11
npmcrossmint-wallets-sdk
1.0.0
npm-2026-06-27-crossmint-wallets-sdk-impersonatorSource advisory
Critical27 Jun 2026
3 packages tracked
`ts-einkle` + `ts-ankle` + `ts-einkle-slot` - crypto-wallet drainer / SSH backdoor / big.js typosquat cluster
Between 2026-06-26 and 2026-06-27 a single naming-cluster operator published three new malicious npm packages - ts-einkle (5 versions), ts-einkle-slot (5 versions), and ts-ankle (1 version). All three execute install-time payloads: ts-einkle is a full credential and crypto-wallet stealer exfiltrating to datasecure-service.vercel.app/api/v1; ts-ankle recursively walks the home directory for credential files and installs an SSH public key in ~/.ssh/authorized_keys; ts-einkle-slot typosquats big.js and shadow-loads node-slot on every require(). npm-support replaced all three with 0.0.1-security holders on 2026-06-29.
npm
Affected packages3 packages · 10 versions
npmts-ankle
1.1.0
npmts-einkle
1.0.91.1.01.1.21.1.3
npmts-einkle-slot
0.0.80.0.90.1.00.1.10.1.2
npm-2026-06-27-ts-einkle-ankle-wallet-clusterSource advisory
High27 Jun 2026
1 package tracked
`polymarket-clob-math` - Polymarket SDK impersonator with Vercel-hosted unsigned tarball loader
On 2026-06-27 17:20 UTC an operator published polymarket-clob-math@1.0.4 to npm - an impersonator of the legitimate @polymarket/clob-client math helper. A postinstall script fetches a JSON config from an unverified Vercel domain (PSM_PEER_URL), downloads and extracts an unpinned mutable tarball whose contents the operator can swap at will, and executes the resulting attacker JavaScript on the installer. Internal references (peer-math.js, syncSession) masquerade it as a benign dependency-sync mechanism. npm-support replaced 1.0.4 with a 0.0.1-security holder on 2026-06-29.
npm
Affected packages1 package · 1 version
npmpolymarket-clob-math
1.0.4
npm-2026-06-27-polymarket-clob-math-vercel-loaderSource advisory
High27 Jun 2026
2 packages tracked
`livekit-agents` (npm) + `skillspector` (PyPI) - coordinated multi-ecosystem typosquat exfiltrating to `livekit-agents.xyz`
Between 2026-06-27 and 2026-06-28 a single operator published a coordinated multi-ecosystem typosquat campaign exfiltrating to the lookalike domain livekit-agents.xyz. Unscoped livekit-agents on npm (10 versions, four of them flagged malicious) impersonates the LiveKit Agents SDK while beaconing host telemetry. The PyPI package skillspector (8 versions) - an unauthorized fork of a legitimate Nvidia project - exfiltrates every CLI argument to https://livekit-agents.xyz/skillspector-telemetry. The shared lookalike domain ties both packages to the same operator.
npmPyPI
Affected packages2 packages · 12 versions
npmlivekit-agents
0.3.00.3.10.3.20.3.4
PyPIskillspector
0.0.10.0.20.0.30.0.42.3.72.3.82.3.92.3.10
multi-2026-06-27-livekit-agents-skillspector-typosquatSource advisory
High26 Jun 2026
1 package tracked
`tw-style-utils` - SStar Agent cross-platform RAT delivered via Tailwind Typography typosquat
tw-style-utils masqueraded as a Tailwind CSS typography plugin (99% of its code copied from @tailwindcss/typography) while ~5KB of top-level IIFE downloader code installed SStar Agent, a Windows/macOS RAT with keyboard/clipboard hooks and exfiltration capability. Two versions (0.7.0, 0.7.1) were live on npm from 2026-05-26 17:19 UTC; npm yanked the package and replaced latest with a 0.0.1-security holder on 2026-06-26 05:17 UTC, and GitHub published GHSA-75cr-ggc5-8h7g the same day.
npm
Affected packages1 package · 2 versions
npmtw-style-utils
0.7.00.7.1
npm-2026-06-26-sstar-tw-style-utilsSource advisory
High26 Jun 2026
4 packages tracked
npm typosquat sweep - `pump-stream-logger`, `pump-laserstream-parser`, `pino-zod`, `rollup-plugin-polyfill-connect` yanked
On 2026-06-26 npm yanked four malicious typosquat packages within hours of each other - pump-stream-logger, pump-laserstream-parser, and pino-zod were taken down within a 10-second window at 05:10 UTC, and rollup-plugin-polyfill-connect followed at 12:16 UTC. All four are GHSA-classified as CWE-506 Embedded Malicious Code; the package names target the Helius Solana streaming SDK, the Pino logger family, the Zod validation library, and the rollup-plugin-polyfill-node Rollup plugin.
npm
Affected packages4 packages · 7 versions
npmpino-zod
1.0.1211.0.122
npmpump-laserstream-parser
2.0.0
npmpump-stream-logger
1.0.0
npmrollup-plugin-polyfill-connect
1.0.11.0.21.0.3
npm-2026-06-26-pump-pino-rollup-typosquat-sweepSource advisory
High25 Jun 2026
1 package tracked
`@vpms/design-system` - internal-scope dependency-confusion with preinstall env-var exfil to Pipedream
On 2026-06-25 between 15:52 UTC and 17:14 UTC, an operator published four versions of @vpms/design-system (0.1.3, 1.0.0, 1.0.1, 1.1.2) as a dependency-confusion attack against the internal @vpms scope. The preinstall script iterates process.env and harvests every variable whose name contains SECRET, TOKEN, PASSWORD, KEY, or CREDENTIAL, along with hostname, username, and process details, then exfiltrates the payload to a hardcoded Pipedream webhook at eov0bmnid410yqf.m.pipedream.net. npm-support replaced all four versions with a 0.0.1-security holder on 2026-06-29.
npm
Affected packages1 package · 4 versions
npm@vpms/design-system
0.1.31.0.01.0.11.1.2
npm-2026-06-25-vpms-design-system-pipedreamSource advisory
Critical24 Jun 2026
1 package tracked
codfish/semantic-release-action - 16 tags retargeted to Miasma imposter commit
On 2026-06-24 at 15:39:06 UTC an attacker force-pushed two imposter commits to codfish/semantic-release-action and repointed 16 tags - including the floating majors v2, v3, v4, v5 - to them. Any workflow pinned by tag pulls 781,580 bytes of obfuscated JavaScript that searches GitHub commit-search for the thebeautifulsnadsoftime Miasma dead-drop channel and eval()s any signed payload, exfiltrating GITHUB_TOKEN and NPM_TOKEN from release workflows.
GitHub Actions
Affected packages1 package · 14 versions
GitHub Actionscodfish/semantic-release-action
v2v2.2.1v3v3.0.0v3.1.0v3.2.0v3.3.0v3.4.0v3.5.0v4v4.0.0v4.0.1v5v5.0.0
github-actions-2026-06-24-codfish-semantic-release-action-hijackSource advisory
Critical24 Jun 2026
2 packages tracked
Leo Platform / RStreams - czirker maintainer account hijacked, 20 npm packages backdoored in 3 seconds
On 2026-06-24 at 23:04:55 UTC an attacker used the compromised czirker npm maintainer account to publish malicious versions of 20 Leo Platform / RStreams packages in a sub-3-second automated burst. Each tarball ships a weaponised binding.gyp that hides a node-gyp command-substitution payload - the same "Phantom Gyp" hook used in the 2026-06-01 Miasma @redhat-cloud-services worm - running a Bun-runtime credential stealer (the Shai-Hulud "Hades" payload) that exfiltrates AWS/GCP/Azure/Kubernetes/Vault/npm/PyPI/GitHub/1Password secrets via the victim's own GitHub token.
npm
Affected packages2 packages · 2 versions
npmleo-logger
1.0.8
npmleo-sdk
6.0.19
npm-2026-06-24-leo-platform-miasma-hadesSource advisory
High22 Jun 2026
3 packages tracked
PostCSS lookalike npm typosquats deliver multi-stage Windows RAT (abdrizak / JFrog)
JFrog disclosed three malicious npm packages published by the abdrizak account that masquerade as postcss-selector-parser tooling. An AES-256-GCM-encrypted blob drops a PowerShell stager which fetches a Windows RAT from nvidiadriver[.]net, persists via the registry, and beacons over encrypted HTTP to 95.216.92.207:8080 to steal Chrome credentials and run remote-shell / file-transfer commands.
npm
Affected packages3 packages · 33 versions
npmaes-decode-runner-pro
1.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.11
npmpostcss-minify-selector
0.1.20.1.30.1.40.1.50.1.60.1.70.1.80.1.90.1.100.1.112.0.12.0.2
npmpostcss-minify-selector-parser
1.0.111.0.121.0.131.0.141.0.151.0.161.0.171.0.182.0.12.0.2
npm-2026-06-22-postcss-rat-typosquat-jfrogSource advisory
High18 Jun 2026
8 packages tracked
`parket-helper` / `ts-ecro` big.js typosquat dropper cluster
A cluster of npm typosquats impersonating big.js shipped verbatim copies of the legitimate library with a single added five-line require of parket-helper / parket-slot / new-solt - three otherwise-empty utility packages whose entire purpose is to execute attacker-controlled JavaScript at import time. GitHub and npm flagged the eight packages and replaced them with 0.0.1-security holders between 2026-06-18 and 2026-06-19.
npm
Affected packages8 packages · 16 versions
npmnew-ecro
0.0.60.0.70.0.9
npmnew-solt
0.0.70.0.80.0.9
npmparket-helper
0.0.15.8.1
npmparket-slot
0.0.6
npmts-big-ecro
0.1.03.8.1
npmts-ecro
0.0.50.0.6
npmts-ecro-helper
0.0.15.8.0
npmts-esys
0.0.5
npm-2026-06-18-parket-ecro-bigjs-typosquat-dropperSource advisory
Critical18 Jun 2026
3 packages tracked
`node-ci-utils` / `win-env-setup` / `macos-ci-utils` npm droppers deliver the NastyC2 Rust post-exploitation framework
Three npm packages - node-ci-utils@2.1.4, win-env-setup@3.0.5/3.0.6, and macos-ci-utils@1.0.0/1.0.1 - masqueraded as CI tooling while acting as cross-platform droppers for NastyC2, a previously undocumented Rust post-exploitation framework with 80+ commands comparable in scope to Cobalt Strike and Sliver. npm removed all three packages between 2026-06-01 and 2026-06-13; the public disclosure landed in The Hacker News ThreatsDay Bulletin on 2026-06-18.
npm
Affected packages3 packages · 5 versions
npmmacos-ci-utils
1.0.01.0.1
npmnode-ci-utils
2.1.4
npmwin-env-setup
3.0.53.0.6
npm-2026-06-18-nastyc2-rust-implant-droppersSource advisory
Critical17 Jun 2026
17 packages tracked
Mastra AI npm scope takeover via `easy-day-js` typosquat dropper
On 2026-06-17 between ~01:12 and 02:36 UTC, the dormant ehindero contributor account - never revoked from the @mastra scope - was used to mass-publish ~144 trojanised @mastra/* releases plus mastra and create-mastra, each declaring a new easy-day-js dependency whose postinstall hook drops a cross-platform crypto-wallet stealer / RAT. Microsoft attributes the activity to Sapphire Sleet (BlueNoroff) with high confidence; combined exposure ~1.1M weekly downloads.
npm
Affected packages17 packages · 17 versions
npm@mastra/agent-browser
0.3.2
npm@mastra/auth
1.0.3
npm@mastra/core
1.42.1
npm@mastra/evals
1.3.1
npm@mastra/github-signals
0.1.2
npm@mastra/loggers
1.1.3
npm@mastra/mem0
0.1.14
npm@mastra/memory
1.20.4
npm@mastra/node-audio
0.1.8
npm@mastra/node-speaker
0.1.1
npm@mastra/rag
2.2.2
npm@mastra/react
1.0.1
npm@mastra/schema-compat
1.2.12
npm@mastra/voice-playai
0.12.2
npmcreate-mastra
1.13.1
npmeasy-day-js
1.11.22
npmmastra
1.13.1
npm-2026-06-17-mastra-easy-day-jsSource advisory
Info16 Jun 2026
1 package tracked
`shai_hulululud`: first documented anti-AI-scanner protestware npm package
Socket flagged shai_hulululud@1.0.48596 (~9.3 MB index.js, published 2026-06-16 by npm user ptchli_knldg) - protestware whose only purpose is to probe and disrupt AI-based malware scanners. The tarball is a single JS file containing millions of repeated comments with prompt-injection content, fake system-override instructions, and context-flooding tokens. Runtime is inert; the payload is the source code itself, weaponised against any LLM-based scanner that ingests it.
npm
Affected packages1 package · 1 version
npmshai_hulululud
1.0.48596
npm-2026-06-16-shai-hulululud-ai-scanner-protestwareSource advisory
Critical13 Jun 2026
11 packages tracked
Cyfirma multi-stage crypto-wallet campaign: moralis-sdk, ethers-jss, coinbase-wallet-utils, plus the `ethcompat` ethereum-C2 cluster
Cyfirma Research disclosed an 11-package npm campaign targeting Web3 / blockchain developers across three clusters: a YouTube-page-gated postinstall trojan in moralis-sdk (2.7M+ downloads from the legitimate package name), the ethers-jss / coinbase-wallet-utils private-key sweepers (both yanked 2026-06-10), three long-lived typosquats (ganach, solidty, stelar-sdk, live since 2024), and the ethcompat 5-pack (hardhat-deploy-utils, web3-deploy-helper, defi-sdk-core, ethers-compat, ethereum-dev-utils) that AES-256-GCM-encrypts stolen creds and embeds them in Ethereum transactions to an attacker wallet.
npm
Affected packages11 packages · 12 versions
npmcoinbase-wallet-utils
1.0.0
npmdefi-sdk-core
1.0.0
npmethereum-dev-utils
1.0.0
npmethers-compat
1.0.0
npmethers-jss
6.13.1
npmganach
7.9.2
npmhardhat-deploy-utils
1.0.0
npmmoralis-sdk
1.0.01.0.1
npmsolidty
0.0.1
npmstelar-sdk
12.3.0
npmweb3-deploy-helper
1.0.0
npm-2026-06-13-cyfirma-moralis-ethcompat-clusterSource advisory
Critical12 Jun 2026
7 packages tracked
Solana FakeFix: JFrog flags 25 npm + PyPI packages stealing Solana keypairs and dev secrets to Telegram
JFrog Security Research disclosed Solana FakeFix, a 25-package npm/PyPI campaign with two clusters: ~20 Solana typosquats / "stable-build" forks (solana-web3-stable, solana-rpc-client, …) promoted via GitHub issue spam by the PassWord1337 account, and a 5-package CMS-themed Windows loader cluster (cms-storehub, cms-helpgit, cms-github, to-cms, shopifyto-cms). All variants exfiltrate Solana keypairs, SSH keys, cloud creds, and .env secrets to a Telegram bot.
npm
Affected packages7 packages · 23 versions
npmcms-github
4.2.4
npmcms-helpgit
4.2.24.2.44.2.54.2.64.2.74.2.84.2.9
npmcms-storehub
1.2.71.2.81.2.91.3.01.3.11.3.21.3.31.3.41.3.51.3.6
npmshopifyto-cms
3.0.2
npmsolana-rpc-client
1.0.0
npmsolana-web3-stable
1.0.0
npmto-cms
1.0.01.0.1
multi-2026-06-12-solana-fakefix-jfrogSource advisory
Critical11 Jun 2026
4 packages tracked
Atomic Arch: 400+ AUR packages hijacked to ship npm-delivered Rust stealer with eBPF rootkit
Sonatype-2026-003775 (2026-06-11) - attackers hijacked 400+ orphaned Arch User Repository packages and rewrote their PKGBUILDs to pull three malicious npm dependencies (atomic-lockfile@1.4.2, js-digest@4.2.2, lockfile-js@1.4.2). Each drops a Rust ELF credential stealer, loads an eBPF rootkit hiding processes/files/sockets when run as root, persists via systemd, and exfiltrates over Tor onion C2.
npm
Affected packages4 packages · 4 versions
npmatomic-lockfile
1.4.2
npmjs-digest
4.2.2
npmlockfile-js
1.4.2
npmnextfile-js
1.4.2
npm-2026-06-11-atomic-arch-aur-hijackSource advisory
Critical9 Jun 2026
1 package tracked
dbmux maintainer-account takeover: four backdoored versions seeded across two release branches
Between 2026-06-04 and 2026-06-05 the dbmux npm maintainer account (bhagyamudgal) was hijacked and four backdoored releases were pushed across both the legacy 1.x and current 2.x branches: 1.0.5, 1.0.6, 2.2.4, 2.2.5. GHSA-62wx-5f55-w8g2 (published 2026-06-09) classifies all four as CWE-506 embedded malicious code: any host that installed or executed them should be treated as fully compromised. npm deprecated every malicious release; the clean latest is 2.2.3.
npm
Affected packages1 package · 4 versions
npmdbmux
1.0.51.0.62.2.42.2.5
npm-2026-06-09-dbmux-maintainer-takeoverSource advisory
Critical9 Jun 2026
4 packages tracked
SeedSweep: 10-package npm crypto-wallet drainer published by `aicrypto-xzggg`
On 2026-06-09 between 03:23 and 03:57 UTC the brand-new npm account aicrypto-xzggg (vipsyria88@gmail.com) shipped 10 Web3-flavoured packages - wallet-sdk-9, swap-sdk-87, defi-tools-39, farming-tools-12, and six others - each carrying an identical postinstall payload that reads wallet keystores, seed-phrase files, SSH keys, and .env files across six chains and exfiltrates them to Telegram bot id 8227918239. npm unpublished every release ~8 hours later. Disclosed by Xygeni as the SeedSweep campaign.
npm
Affected packages4 packages · 4 versions
npmdefi-tools-39
4.26.29
npmfarming-tools-12
4.68.54
npmswap-sdk-87
4.63.78
npmwallet-sdk-9
3.7.73
npm-2026-06-09-seedsweep-aicrypto-xzgggSource advisory
Critical5 Jun 2026
34 packages tracked
Hades / Shai-Hulud PyPI wave: bioinformatics, MCP typosquats, and the .pth + Bun startup payload
Between 2026-06-05 and 2026-06-08 the Shai-Hulud / Miasma operator hopped to PyPI as "Hades", trojanising ~33 packages across the nanguage bioinformatics cluster (StepSecurity: 19 quarantined projects), monarch-initiative phenotype tooling, and MCP/Flask typosquats. Each ships a *-setup.pth startup hook → Bun credential stealer with cross-platform memory scraping.
PyPI
Affected packages34 packages · 56 versions
PyPIbramin
0.0.20.0.30.0.4
PyPIcmd2func
0.2.20.2.3
PyPIcoolbox
0.4.10.4.2
PyPIdynamo-release
1.5.4
PyPIembiggen
0.11.97
PyPIensmallen
0.8.101
PyPIexecutor-engine
0.3.40.3.5
PyPIexecutor-http
0.1.30.1.4
PyPIfuncdesc
0.2.20.2.3
PyPIgpsea
0.9.14
PyPIlangchain-core-mcp
1.4.21.4.3
PyPImagique
0.6.80.6.9
PyPImagique-ai
0.4.40.4.5
PyPImflux-streamlit
0.0.30.0.4
PyPImrbios
0.1.10.1.2
PyPInapari-ufish
0.0.20.0.3
PyPInhmpy
0.0.1
PyPInucbox
0.1.20.1.3
PyPIokite
0.0.70.0.8
PyPIopenai-mcp
2.41.12.41.2
PyPIpantheon-agents
0.6.10.6.2
PyPIpantheon-toolsets
0.5.50.5.6
PyPIphenopacket-store-toolkit
0.1.7
PyPIppkt2synergy
0.1.1
PyPIpyphetools
0.9.120
PyPIray-mcp-server
0.2.1
PyPIrlask
0.0.1
PyPIrsquests
0.0.1
PyPIspateo-release
1.1.2
PyPIsynago
0.1.10.1.2
PyPItiktoken-mcp
0.13.10.13.2
PyPItlask
0.0.1
PyPIufish
0.1.20.1.3
PyPIuprobe
0.1.30.1.4
pypi-2026-06-05-hades-shai-hulud-pypi-waveSource advisory
Critical4 Jun 2026
4 packages tracked
IronWorm: Rust-built npm worm with eBPF rootkit and Tor C2 hits 36+ Arweave/WeaveDB packages
JFrog disclosed on 2026-06-04 that a single compromised npm account (asteroiddao, tied to Arweave/WeaveDB maintainer ocrybit) was used to push malicious versions of 36+ packages carrying IronWorm - a Rust ELF infostealer that loads an eBPF rootkit, exfiltrates over Tor, harvests Exodus crypto wallets, and republishes itself via stolen npm OIDC trust.
npm
Affected packages4 packages · 4 versions
npmarnext
0.1.5
npmatomic-notes
0.5.3
npmroidjs
0.1.7
npmweavedb-lite
0.1.1
npm-2026-06-04-ironworm-arweave-weavedbSource advisory
Critical3 Jun 2026
26 packages tracked
Phantom Gyp Miasma worm hits @vapi-ai/server-sdk and the jagreehal portfolio via binding.gyp
Between 23:30 UTC on 2026-06-03 and ~01:30 UTC on 2026-06-04 the Miasma worm published a malicious 157-byte binding.gyp payload through 57 npm packages and 286+ versions, starting at @vapi-ai/server-sdk (~408k weekly downloads) and cascading across the jagreehal maintainer's autotel-*, awaitly-*, ai-sdk-*, executable-stories-*, node-env-resolver-*, and wrangler-deploy portfolio. GitHub Advisories backfilled the full affected-version set across the autotel-* family and the wider awaitly-* portfolio on 2026-06-29 / 2026-06-30 (16 new autotel-* GHSAs plus expanded awaitly / awaitly-mongo / awaitly-libsql / awaitly-analyze ranges).
npm
Affected packages26 packages · 164 versions
npm@vapi-ai/server-sdk
0.11.1
npmai-sdk-ollama
0.13.11.1.12.2.13.8.5
npmautotel-backends
2.12.26
npmautotel-cli
0.8.14
npmautotel-drizzle
0.0.27
npmautotel-eventcatalog
1.0.12.0.13.0.14.0.25.0.1
npmautotel-hono
0.4.26
npmautotel-mcp
0.1.142.0.13.0.14.0.15.0.16.0.17.0.18.0.19.0.110.0.111.0.113.0.114.0.115.0.216.0.117.0.218.0.119.0.120.0.121.1.122.0.123.0.124.0.125.0.126.0.227.0.128.0.329.0.1
npmautotel-mcp-instrumentation
29.0.230.0.531.0.132.0.133.0.234.0.1
npmautotel-mongoose
0.0.31.0.22.0.53.0.14.0.15.0.26.0.1
npmautotel-pact
0.2.21.0.3
npmautotel-playwright
0.4.32
npmautotel-plugins
0.19.26
npmautotel-sentry
0.5.13
npmautotel-subscribers
4.1.15.0.16.0.17.0.18.0.19.0.110.0.111.0.112.0.113.0.114.1.115.0.116.0.217.0.118.0.319.0.120.0.121.0.122.0.223.0.224.0.125.0.126.0.127.0.228.0.229.0.630.0.431.1.4
npmautotel-tanstack
1.13.27
npmautotel-vitest
0.4.26
npmautotel-web
1.12.2
npmawaitly
1.33.3
npmawaitly-analyze
0.24.21.1.12.0.13.0.14.0.15.0.16.0.17.0.18.0.1
npmawaitly-libsql
0.1.11.0.12.0.13.0.14.0.15.0.16.0.17.0.18.0.19.0.110.0.111.0.112.0.113.0.114.0.115.0.116.0.117.0.118.1.119.0.120.0.121.0.122.0.1
npmawaitly-mongo
0.1.11.0.12.0.13.0.14.0.15.0.16.0.17.0.18.0.19.1.110.0.111.0.112.0.113.0.114.0.115.0.116.0.117.0.118.0.119.1.120.0.121.0.122.0.123.0.1
npmawaitly-postgres
0.1.11.0.12.0.13.0.24.0.15.0.16.0.17.0.18.0.19.0.110.0.111.0.112.0.1
npmawaitly-visualizer
1.0.1
npmnode-env-resolver
6.5.1
npmwrangler-deploy
1.5.5
npm-2026-06-03-phantom-gyp-vapi-jagreehalSource advisory
High3 Jun 2026
2 packages tracked
@sentry-internals / @sentry-browser-sdk profiling-node typosquat via forged Sentry events
On 2026-06-03 Nutrient (PSPDFKit) caught a novel two-stage attack: an attacker submitted forged Sentry events through a public browser DSN, displaying "remediation" runbook text that instructed responders (and AI agents) to run npx @sentry-internals/profiling-node --diagnose. The typosquat - and its sibling @sentry-browser-sdk/profiling-node (v1.0.0–1.0.5) - exfiltrated env, working-directory, and dev-context data to advisory-tracker.com before npm replaced both with 0.0.1-security holders.
npm
Affected packages2 packages · 7 versions
npm@sentry-browser-sdk/profiling-node
1.0.01.0.11.0.21.0.31.0.41.0.5
npm@sentry-internals/profiling-node
1.0.0
npm-2026-06-03-sentry-profiling-typosquatSource advisory
High2 Jun 2026
1 package tracked
codexui-android exfiltrates OpenAI Codex refresh tokens for ~7 weeks before Aikido disclosure
Aikido disclosed on 2026-06-02 that every codexui-android npm version from 0.1.82 (2026-04-13) through 0.1.125 silently exfiltrates the user's OpenAI Codex auth.json - access, refresh, and ID tokens - to sentry.anyclaw[.]store/startlog. The malicious code never appeared in the package's GitHub repository, and a companion Android app (50k+ installs) ships the same stealer.
npm
Affected packages1 package · 41 versions
npmcodexui-android
0.1.820.1.830.1.850.1.880.1.890.1.900.1.910.1.920.1.930.1.940.1.950.1.960.1.970.1.980.1.990.1.1000.1.1010.1.1020.1.1030.1.1040.1.1050.1.1060.1.1070.1.1080.1.1090.1.1100.1.1110.1.1120.1.1130.1.1140.1.1150.1.1160.1.1170.1.1180.1.1190.1.1200.1.1210.1.1220.1.1230.1.1240.1.125
npm-2026-06-02-codexui-android-openclawSource advisory
Critical1 Jun 2026
32 packages tracked
Miasma: @redhat-cloud-services Mini Shai-Hulud worm compromises 32 npm packages in 72 seconds
On 2026-06-01 an attacker published malicious versions of 32 @redhat-cloud-services/* npm packages in a 72-second window. The "Miasma" payload - a reskinned Mini Shai-Hulud worm - drops a preinstall script that runs a Bun-loaded credential stealer, harvests AWS/GCP/Azure/Kubernetes/Vault/GitHub/npm tokens, and exfiltrates to attacker-controlled GitHub repos tagged Miasma: The Spreading Blight.
npm
Affected packages32 packages · 95 versions
npm@redhat-cloud-services/chrome
2.3.12.3.22.3.4
npm@redhat-cloud-services/compliance-client
4.0.34.0.44.0.6
npm@redhat-cloud-services/config-manager-client
5.0.45.0.55.0.7
npm@redhat-cloud-services/entitlements-client
4.0.114.0.124.0.14
npm@redhat-cloud-services/eslint-config-redhat-cloud-services
3.2.13.2.23.2.4
npm@redhat-cloud-services/frontend-components
7.7.27.7.37.7.5
npm@redhat-cloud-services/frontend-components-advisor-components
3.8.23.8.43.8.6
npm@redhat-cloud-services/frontend-components-config
6.11.36.11.46.11.6
npm@redhat-cloud-services/frontend-components-config-utilities
4.11.24.11.34.11.5
npm@redhat-cloud-services/frontend-components-notifications
6.9.26.9.36.9.5
npm@redhat-cloud-services/frontend-components-remediations
4.9.24.9.34.9.5
npm@redhat-cloud-services/frontend-components-testing
1.2.11.2.21.2.4
npm@redhat-cloud-services/frontend-components-translations
4.4.14.4.24.4.4
npm@redhat-cloud-services/frontend-components-utilities
7.4.17.4.27.4.4
npm@redhat-cloud-services/hcc-feo-mcp
0.3.10.3.20.3.4
npm@redhat-cloud-services/hcc-kessel-mcp
0.3.10.3.20.3.4
npm@redhat-cloud-services/hcc-pf-mcp
0.6.10.6.20.6.4
npm@redhat-cloud-services/host-inventory-client
5.0.35.0.45.0.6
npm@redhat-cloud-services/insights-client
4.0.44.0.54.0.7
npm@redhat-cloud-services/integrations-client
6.0.46.0.56.0.7
npm@redhat-cloud-services/javascript-clients-shared
2.0.82.0.92.0.11
npm@redhat-cloud-services/notifications-client
6.1.46.1.56.1.7
npm@redhat-cloud-services/patch-client
4.0.44.0.54.0.7
npm@redhat-cloud-services/quickstarts-client
4.0.114.0.124.0.14
npm@redhat-cloud-services/rbac-client
9.0.39.0.49.0.6
npm@redhat-cloud-services/remediations-client
4.0.44.0.54.0.7
npm@redhat-cloud-services/rule-components
4.7.24.7.34.7.5
npm@redhat-cloud-services/sources-client
3.0.103.0.113.0.13
npm@redhat-cloud-services/topological-inventory-client
3.0.103.0.113.0.13
npm@redhat-cloud-services/tsc-transform-imports
1.2.21.2.41.2.6
npm@redhat-cloud-services/types
3.6.13.6.23.6.4
npm@redhat-cloud-services/vulnerabilities-client
2.1.92.1.11
npm-2026-06-01-miasma-redhat-cloud-servicesSource advisory
High28 May 2026
45 packages tracked
oob.moika.tech dependency-confusion campaign across nine npm scopes (mr.4nd3r50n / ce-rwb / t-in-one)
Between 2026-05-28 18:47 UTC and 2026-05-29 09:02 UTC a single operator using the npm aliases mr.4nd3r50n, ce-rwb, and t-in-one pushed dependency-confusion packages across nine corporate-looking scopes (@cloudplatform-single-spa, @t-in-one, @ce-rwb, @wb-track, @data-science, @payments-widget, @travel-autotests, @capibar.chat, @sber-ecom-core). Postinstall stagers exfiltrate process.env to oob.moika[.]tech with a shared X-Secret header.
npm
Affected packages45 packages · 47 versions
npm@capibar.chat/ui-kit
99.0.799.5.7
npm@ce-rwb/ce-tools-editor-admin
3.5.22
npm@ce-rwb/ce-tools-editor-core
3.5.22
npm@ce-rwb/ce-tools-editor-render
3.5.22
npm@cloudplatform-single-spa/administration
100.100.100
npm@cloudplatform-single-spa/arenadata-db
100.100.100
npm@cloudplatform-single-spa/base-static-page
100.100.100
npm@cloudplatform-single-spa/business-solutions
100.100.100
npm@cloudplatform-single-spa/cloud-dns
100.100.100
npm@cloudplatform-single-spa/cnapp-ui
100.100.100
npm@cloudplatform-single-spa/cp-api-gw
100.100.100
npm@cloudplatform-single-spa/datagrid
100.100.100
npm@cloudplatform-single-spa/dataplatform
100.100.100
npm@cloudplatform-single-spa/dataplatform-metastore
100.100.100
npm@cloudplatform-single-spa/dataplatform-trino
100.100.100
npm@cloudplatform-single-spa/employees
100.100.100
npm@cloudplatform-single-spa/enterprise
100.100.100
npm@cloudplatform-single-spa/floating-ips
100.100.100
npm@cloudplatform-single-spa/logaas
100.100.100
npm@cloudplatform-single-spa/marketplace-gigachat
100.100.100
npm@cloudplatform-single-spa/ml-ai-agents-agent
100.100.100
npm@cloudplatform-single-spa/ml-ai-agents-agent-system
100.100.100
npm@cloudplatform-single-spa/monitoring
100.100.100
npm@cloudplatform-single-spa/security-groups
100.100.100
npm@cloudplatform-single-spa/ssh-keys
100.100.100
npm@cloudplatform-single-spa/support
100.100.100
npm@cloudplatform-single-spa/svp-baas
100.100.100
npm@cloudplatform-single-spa/svp-interfaces
100.100.100
npm@cloudplatform-single-spa/svp-s3-storage
100.100.100
npm@cloudplatform-single-spa/vpn
100.100.100
npm@data-science/llm
3.5.22
npm@payments-widget/payments-widget-sdk
3.5.22
npm@sber-ecom-core/sberpay-widget
99.0.799.5.8
npm@t-in-one/add_app_middleware_token
5.7.1
npm@t-in-one/add_application
5.7.1
npm@t-in-one/add_application_service_token
5.7.1
npm@t-in-one/add_application_tid
5.7.1
npm@t-in-one/application_id_storage_key_token
5.7.1
npm@t-in-one/form_product_token
5.7.1
npm@t-in-one/get_application_hid
5.7.1
npm@t-in-one/only_difference_payload
5.7.1
npm@t-in-one/prefill_bundle_data_token
5.7.1
npm@t-in-one/prefill_credit_data_token
5.7.1
npm@travel-autotests/npm-proto
3.5.22
npm@wb-track/shared-front
3.5.22
npm-2026-05-28-moika-dependency-confusionSource advisory
High28 May 2026
14 packages tracked
vpmdhaj OpenSearch / ElasticSearch / DevOps typosquat burst (14 npm packages, Bun stager → cloud + CI/CD secret theft)
Microsoft Threat Intelligence flagged 14 typosquat npm packages published on 2026-05-28 by a single new maintainer alias vpmdhaj (a39155771@gmail.com) in a ~4-hour window. Install-time stager pulls a ~195KB Bun-compiled credential harvester from aab.sportsontheweb[.]net/x.php (X-Supply: 1 header) and exfiltrates AWS, HashiCorp Vault, GitHub Actions and npm publish tokens.
npm
Affected packages14 packages · 41 versions
npm@vpmdhaj/devops-tools
1.0.7267
npm@vpmdhaj/elastic-helper
1.0.7269
npm@vpmdhaj/opensearch-setup
1.0.7267
npm@vpmdhaj/search-setup
1.0.7268
npmapp-config-utility
1.0.92001.0.9300
npmelastic-opensearch-helper
1.0.72651.0.91031.0.91041.0.91051.0.91061.0.91071.0.9108
npmenv-config-manager
2.1.9201
npmopensearch-config-utility
1.0.72651.0.91041.0.91051.0.9106
npmopensearch-security-scanner
1.0.81.0.91.0.10
npmopensearch-setup
1.0.90001.0.91001.0.91011.0.91021.0.9103
npmopensearch-setup-tool
1.0.72651.0.91061.0.91071.0.9108
npmsearch-cluster-setup
1.0.72651.0.91021.0.91031.0.9104
npmsearch-engine-setup
1.0.72651.0.91051.0.91061.0.91071.0.9108
npmvpmdhaj-opensearch-setup
1.0.91011.0.9102
npm-2026-05-28-vpmdhaj-opensearch-typosquatsSource advisory
High26 May 2026
1 package tracked
mouse5212-super-formatter: AI-generated npm infostealer targets Claude AI /mnt/user-data
On 2026-05-26 a fresh npm publisher pushed five versions of mouse5212-super-formatter (1.0.0–1.0.4) that exfiltrate files from Claude AI's /mnt/user-data directory to an attacker GitHub repo via a hard-coded PAT. Disclosed by OX Security on 2026-05-27 ("Malware-Slop"); ~676 downloads before npm unpublished all versions.
npm
Affected packages1 package · 5 versions
npmmouse5212-super-formatter
1.0.01.0.11.0.21.0.31.0.4
npm-2026-05-26-mouse5212-claude-ai-exfilSource advisory
Critical22 May 2026
4 packages tracked
Laravel-Lang Composer packages - every git tag retargeted to a malicious fork commit
On 2026-05-22 an attacker with push access to the laravel-lang GitHub org retargeted every git tag in laravel-lang/lang, http-statuses, actions, and attributes to malicious fork commits. composer require/update then pulls a src/helpers.php backdoor, autoloaded on every PHP request, that exfiltrates cloud and CI/CD secrets to flipboxstudio.info.
Packagist
Affected packages4 packages · 0 versions
Packagistlaravel-lang/actions
Packagistlaravel-lang/attributes
Packagistlaravel-lang/http-statuses
Packagistlaravel-lang/lang
packagist-2026-05-22-laravel-lang-tag-hijackSource advisory
Critical22 May 2026
34 packages tracked
TrapDoor / AuditorTrap crypto-stealer campaign across npm, PyPI and crates.io
Starting 2026-05-22 the TrapDoor / AuditorTrap campaign pushed 34+ malicious packages (384+ versions) across npm, PyPI and crates.io posing as crypto/DeFi/AI dev tools and fake "security guild" branding. Payloads steal SSH keys, cloud credentials and Solana/Sui/Aptos wallets, and hide zero-width-Unicode prompt injection in CLAUDE.md/.cursorrules to trick Claude Code and Cursor into running the stealer.
crates.ionpmPyPI
Affected packages34 packages · 404 versions
npmasync-pipeline-builder
1.0.01.0.11.0.31.0.41.0.51.0.61.0.81.0.91.0.101.0.111.0.121.0.131.0.141.1.01.2.01.3.01.4.01.5.01.5.1
npmbuild-scripts-utils
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.81.0.91.0.101.0.111.0.121.0.131.0.141.1.01.2.01.3.01.4.01.5.01.5.1
npmchain-key-validator
0.2.10.2.20.2.30.2.41.2.01.2.11.2.21.2.31.3.01.3.11.3.21.3.31.3.41.3.51.3.61.3.71.3.81.3.94.0.0
npmcrypto-credential-scanner
2.0.02.0.12.0.22.0.33.0.03.0.13.0.23.0.33.1.03.1.13.1.23.1.33.1.43.1.53.1.63.1.73.1.83.1.94.0.0
PyPIcryptowallet-safety
PyPIdata-pipeline-check
0.1.1
npmdefi-env-auditor
0.3.00.3.10.3.20.3.31.3.01.3.11.3.21.3.31.4.01.4.11.4.21.4.31.4.41.4.51.4.61.4.71.4.81.4.94.0.0
PyPIdefi-risk-scanner
0.1.0
npmdefi-threat-scanner
2.1.02.1.12.1.22.1.33.1.03.1.13.1.23.1.33.2.03.2.13.2.23.2.33.2.43.2.53.2.63.2.73.2.84.0.0
npmdeployment-key-auditor
0.7.10.7.20.7.30.7.41.7.01.7.11.7.21.7.31.8.01.8.11.8.21.8.31.8.41.8.51.8.61.8.71.8.81.8.94.0.0
npmdev-env-bootstrapper
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.131.0.141.1.01.2.01.3.01.4.01.5.01.5.2
PyPIenv-loader-cli
0.1.1
PyPIeth-security-auditor
0.1.0
npmeth-wallet-sentinel
1.0.71.0.81.0.91.0.102.0.02.0.12.0.22.0.32.1.02.1.12.1.22.1.32.1.42.1.52.1.62.1.72.1.82.1.94.0.0
PyPIgit-config-sync
0.1.1
npmllm-context-compressor
1.0.01.0.11.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.131.0.141.1.01.2.01.3.01.4.01.5.01.5.1
npmmnemonic-safety-check
0.5.00.5.10.5.20.5.31.5.01.5.11.5.21.5.31.6.01.6.11.6.21.6.31.6.41.6.51.6.61.6.71.6.81.6.94.0.0
npmmodel-switch-router
1.0.01.0.11.0.31.0.41.0.51.0.61.0.81.0.91.0.101.0.111.0.121.0.131.0.141.1.01.2.01.3.01.4.01.5.01.5.1
crates.iomove-analyzer-build
crates.iomove-compiler-tools
crates.iomove-project-builder
npmnode-setup-helpers
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.81.0.91.0.101.0.111.0.121.0.131.0.141.1.01.2.01.3.01.4.01.5.01.5.1
npmproject-init-tools
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.81.0.91.0.101.0.111.0.121.0.131.0.141.1.01.2.01.3.01.4.01.5.01.5.1
npmprompt-engineering-toolkit
1.0.01.0.11.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.111.0.121.0.131.0.141.1.01.2.01.3.01.4.01.5.01.5.1
PyPIsolidity-build-guard
npmsolidity-deploy-guard
0.4.20.4.30.4.40.4.51.4.01.4.11.4.21.4.31.5.01.5.11.5.21.5.31.5.41.5.51.5.61.5.71.5.84.0.0
crates.iosui-framework-helpers
crates.iosui-move-build-helper
crates.iosui-sdk-build-utils
npmtoken-usage-tracker
1.0.01.0.11.0.31.0.41.0.51.0.61.0.81.0.91.0.101.0.111.0.121.0.131.0.141.1.01.2.01.3.01.4.01.5.01.5.1
npmwallet-backup-verifier
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.0.91.0.101.0.114.0.0
npmwallet-security-checker
1.0.11.0.21.0.31.0.42.0.02.0.12.0.22.0.32.1.02.1.12.1.22.1.32.1.42.1.52.1.62.1.72.1.84.0.0
npmweb3-secrets-detector
1.2.31.2.41.2.51.2.61.2.72.2.02.2.12.2.22.2.32.3.02.3.12.3.22.3.32.3.42.3.52.3.62.3.72.3.82.3.94.0.0
npmworkspace-config-loader
1.0.01.0.11.0.21.0.31.0.41.0.51.0.61.0.81.0.91.0.101.0.111.0.121.0.131.0.141.1.01.2.01.3.01.4.01.5.01.5.1
multi-2026-05-22-trapdoor-crypto-stealerSource advisory
High22 May 2026
8 packages tracked
Packagist cross-ecosystem postinstall attack - 8 Composer packages drop Linux `gvfsd-network` binary
Socket disclosed on 2026-05-23 a coordinated campaign that planted a malicious postinstall hook in the package.json (NOT composer.json) of eight Packagist Composer packages - including devdojo/wave, devdojo/genesis, and katanaui/katana. The hook curls a Linux binary gvfsd-network from github.com/parikhpreyash4/systemd-network-helper-aa5c751f, writes it to /tmp/.sshd, and runs it backgrounded. Socket flagged the same payload in 700+ public GitHub repos.
Packagist
Affected packages8 packages · 0 versions
Packagistbaskarcm/tzi-chat-ui
Packagistcrosiersource/crosierlib-base
Packagistdevdojo/genesis
Packagistdevdojo/wave
Packagistelitedevsquad/sidecar-laravel
Packagistkatanaui/katana
Packagistmoritz-sauer-13/silverstripe-cms-theme
Packagistr2luna/brain
packagist-2026-05-22-cross-ecosystem-postinstall-binarySource advisory
High21 May 2026
1 package tracked
@common-stack/generate-plugin hijacked - PolinRider-linked RAT in two alpha releases
Sonatype disclosed on 2026-05-21 that two alpha releases of @common-stack/generate-plugin (9.0.2-alpha.21, 9.0.2-alpha.22, published ~2026-05-20–21) ship an install-time stager that pulls a second-stage RAT. Tradecraft overlaps the DPRK-linked PolinRider / Contagious Interview cluster. Package draws ~1,100 weekly downloads as a Node.js plugin scaffolding helper, so any developer machine that ran it during local install should be treated as compromised.
npm
Affected packages1 package · 2 versions
npm@common-stack/generate-plugin
9.0.2-alpha.219.0.2-alpha.22
npm-2026-05-21-common-stack-generate-plugin-polinriderSource advisory
Critical19 May 2026
298 packages tracked
@antv maintainer takeover (atool) - Mini Shai-Hulud burst across ~300 packages
On 2026-05-19 the compromised npm publisher atool (Alibaba / AntV co-maintainer) pushed an automated burst of 639 malicious versions across 323 unique packages - the entire @antv visualization suite plus widely-used unscoped libraries including echarts-for-react, size-sensor, and timeago.js (>15M combined monthly downloads). Each release adds a preinstall: bun run index.js hook running the Mini Shai-Hulud credential-stealer. Attributed to TeamPCP.
npm
Affected packages298 packages · 599 versions
npm@antv/a8
0.1.10.2.1
npm@antv/adjust
0.3.50.4.5
npm@antv/algorithm
0.2.260.3.26
npm@antv/async-hook
2.3.92.4.9
npm@antv/attr
0.4.50.5.5
npm@antv/ava
3.5.13.6.1
npm@antv/ava-react
3.4.23.5.2
npm@antv/awards
0.1.90.2.9
npm@antv/calendar-heatmap
1.2.21.3.2
npm@antv/chart-linter
1.2.61.3.6
npm@antv/chart-node-g6
0.1.40.2.4
npm@antv/chart-visualization-skills
0.2.30.3.3
npm@antv/ckb
2.1.42.2.4
npm@antv/color-schema
0.3.30.4.3
npm@antv/color-util
2.1.62.2.6
npm@antv/component
2.2.112.3.11
npm@antv/coord
0.5.70.6.7
npm@antv/d3-color
1.1.01.2.0
npm@antv/d3-interpolate
1.1.31.2.3
npm@antv/data-samples
1.1.11.2.1
npm@antv/data-set
0.12.80.13.8
npm@antv/data-wizard
2.1.42.2.4
npm@antv/dipper-component
0.1.40.2.4
npm@antv/dipper-hooks
0.3.10.4.1
npm@antv/dipper-map
1.1.101.2.10
npm@antv/dom-util
2.1.42.2.4
npm@antv/dumi-theme-antv
0.9.40.10.4
npm@antv/dw-analyzer
1.2.51.3.5
npm@antv/dw-random
1.2.71.3.7
npm@antv/dw-transform
1.2.71.3.7
npm@antv/dw-util
1.2.41.3.4
npm@antv/event-emitter
0.2.30.3.3
npm@antv/expr
1.1.21.2.2
npm@antv/f-charts
0.1.00.2.0
npm@antv/f-engine
1.11.01.12.0
npm@antv/f-lottie
1.11.01.12.0
npm@antv/f-my
1.11.01.12.0
npm@antv/f-react
1.11.01.12.0
npm@antv/f-test-utils
1.1.91.2.9
npm@antv/f-vue
1.11.01.12.0
npm@antv/f-wx
1.11.01.12.0
npm@antv/f2
5.15.05.16.0
npm@antv/f2-algorithm
5.8.05.9.0
npm@antv/f2-canvas
1.1.51.2.5
npm@antv/f2-context
0.1.10.2.1
npm@antv/f2-graphic
0.1.160.2.16
npm@antv/f2-my
4.1.524.2.52
npm@antv/f2-react
5.15.05.16.0
npm@antv/f2-site
4.1.424.2.42
npm@antv/f2-vue
4.1.334.2.33
npm@antv/f2-wordcloud
5.15.05.16.0
npm@antv/f2-wx
4.1.514.2.51
npm@antv/f6
0.1.190.2.19
npm@antv/f6-alipay
0.1.70.2.7
npm@antv/f6-core
0.1.20.2.2
npm@antv/f6-element
0.1.10.2.1
npm@antv/f6-hammerjs
0.1.20.2.2
npm@antv/f6-plugin
1.1.61.2.6
npm@antv/f6-ui
1.1.31.2.3
npm@antv/f6-wx
0.1.70.2.7
npm@antv/g
6.4.16.5.1
npm@antv/g-base
0.6.160.7.16
npm@antv/g-camera-api
2.1.452.2.45
npm@antv/g-canvas
2.3.02.4.0
npm@antv/g-canvaskit
1.2.11.3.1
npm@antv/g-compat
1.1.111.2.11
npm@antv/g-components
2.1.422.2.42
npm@antv/g-css-layout-api
1.1.381.2.38
npm@antv/g-css-typed-om-api
1.1.381.2.38
npm@antv/g-device-api
1.7.131.8.13
npm@antv/g-dom-mutation-observer-api
2.1.422.2.42
npm@antv/g-gesture
3.1.423.2.42
npm@antv/g-image-exporter
1.1.421.2.42
npm@antv/g-layout-blocklike
1.8.491.9.49
npm@antv/g-lite
2.8.02.9.0
npm@antv/g-lottie-player
1.2.11.3.1
npm@antv/g-math
3.2.03.3.0
npm@antv/g-mobile
1.2.51.3.5
npm@antv/g-mobile-canvas
1.2.11.3.1
npm@antv/g-mobile-canvas-element
1.1.421.2.42
npm@antv/g-mobile-svg
1.2.11.3.1
npm@antv/g-mobile-webgl
1.2.11.3.1
npm@antv/g-pattern
2.1.422.2.42
npm@antv/g-perf
1.1.01.2.0
npm@antv/g-plugin-3d
2.2.12.3.1
npm@antv/g-plugin-a11y
1.5.11.6.1
npm@antv/g-plugin-annotation
1.3.01.4.0
npm@antv/g-plugin-box2d
2.2.12.3.1
npm@antv/g-plugin-canvas-path-generator
2.2.262.3.26
npm@antv/g-plugin-canvas-picker
2.4.12.5.1
npm@antv/g-plugin-canvas-renderer
2.6.12.7.1
npm@antv/g-plugin-canvaskit-renderer
2.4.12.5.1
npm@antv/g-plugin-control
2.2.12.3.1
npm@antv/g-plugin-css-select
2.2.12.3.1
npm@antv/g-plugin-device-renderer
2.7.12.8.1
npm@antv/g-plugin-dom-interaction
2.2.312.3.31
npm@antv/g-plugin-dragndrop
2.2.12.3.1
npm@antv/g-plugin-gesture
2.2.12.3.1
npm@antv/g-plugin-gpgpu
1.10.201.11.20
npm@antv/g-plugin-html-renderer
2.4.12.5.1
npm@antv/g-plugin-image-loader
2.4.12.5.1
npm@antv/g-plugin-matterjs
2.2.12.3.1
npm@antv/g-plugin-mobile-interaction
1.1.421.2.42
npm@antv/g-plugin-physx
2.2.12.3.1
npm@antv/g-plugin-rough-canvas-renderer
2.2.12.3.1
npm@antv/g-plugin-rough-svg-renderer
2.2.12.3.1
npm@antv/g-plugin-svg-picker
2.1.462.2.46
npm@antv/g-plugin-svg-renderer
2.5.12.6.1
npm@antv/g-plugin-webgl-device
1.10.171.11.17
npm@antv/g-plugin-webgl-renderer
1.1.261.2.26
npm@antv/g-plugin-webgpu-device
1.10.171.11.17
npm@antv/g-plugin-yoga
2.4.12.5.1
npm@antv/g-plugin-zdog-canvas-renderer
2.2.12.3.1
npm@antv/g-plugin-zdog-svg-renderer
2.2.12.3.1
npm@antv/g-shader-components
2.1.02.2.0
npm@antv/g-svg
2.2.12.3.1
npm@antv/g-web-animations-api
2.2.322.3.32
npm@antv/g-web-components
2.2.12.3.1
npm@antv/g-webgl
2.2.12.3.1
npm@antv/g-webgl-compute
0.1.10.2.1
npm@antv/g-webgpu
2.2.12.3.1
npm@antv/g-webgpu-compiler
0.8.20.9.2
npm@antv/g-webgpu-core
0.8.20.9.2
npm@antv/g-webgpu-engine
0.8.20.9.2
npm@antv/g-webgpu-raytracer
0.6.10.7.1
npm@antv/g-webgpu-unitchart
0.6.10.7.1
npm@antv/g2
5.5.85.6.8
npm@antv/g2-brush
0.1.20.2.2
npm@antv/g2-extension-3d
0.3.00.4.0
npm@antv/g2-extension-ava
0.3.00.4.0
npm@antv/g2-extension-plot
0.3.20.4.2
npm@antv/g2-plugin-slider
2.2.12.3.1
npm@antv/g2-ssr
0.3.00.4.0
npm@antv/g2plot
2.5.352.6.35
npm@antv/g2plot-schemas
1.3.21.4.2
npm@antv/g6
5.2.15.3.1
npm@antv/g6-alipay
0.1.10.2.1
npm@antv/g6-cli
0.1.40.2.4
npm@antv/g6-core
0.9.240.10.24
npm@antv/g6-editor
1.3.01.4.0
npm@antv/g6-element
0.9.250.10.25
npm@antv/g6-extension-3d
0.2.230.3.23
npm@antv/g6-extension-react
0.3.70.4.7
npm@antv/g6-mobile
0.2.20.3.2
npm@antv/g6-pc
0.9.250.10.25
npm@antv/g6-plugin
0.9.250.10.25
npm@antv/g6-plugin-map-view
0.1.40.2.4
npm@antv/g6-plugins
1.1.91.2.9
npm@antv/g6-react-node
1.5.81.6.8
npm@antv/g6-ssr
0.2.10.3.1
npm@antv/g6-wx
0.1.10.2.1
npm@antv/gatsby-theme
0.2.00.3.0
npm@antv/geo-coord
1.1.81.2.8
npm@antv/gi-assets-advance
2.6.222.7.22
npm@antv/gi-assets-algorithm
2.4.192.5.19
npm@antv/gi-assets-basic
2.5.402.6.40
npm@antv/gi-assets-galaxybase
1.3.151.4.15
npm@antv/gi-assets-graphscope
2.2.152.3.15
npm@antv/gi-assets-hugegraph
1.2.151.3.15
npm@antv/gi-assets-janusgraph
1.2.151.3.15
npm@antv/gi-assets-neo4j
2.2.152.3.15
npm@antv/gi-assets-scene
2.3.212.4.21
npm@antv/gi-assets-tugraph
2.2.152.3.15
npm@antv/gi-assets-tugraph-analytics
0.3.150.4.15
npm@antv/gi-assets-xlab
0.2.300.3.30
npm@antv/gi-cli
1.3.111.4.11
npm@antv/gi-common-components
1.4.161.5.16
npm@antv/gi-mock-data
1.1.51.2.5
npm@antv/gi-public-data
1.1.11.2.1
npm@antv/gi-sdk
3.1.03.2.0
npm@antv/gi-sdk-app
1.3.101.4.10
npm@antv/gi-theme-antd
0.7.110.8.11
npm@antv/github-config-cli
0.2.00.3.0
npm@antv/gl-matrix
2.8.12.9.1
npm@antv/gpt-vis
1.1.01.2.0
npm@antv/gpt-vis-ssr
0.4.70.5.7
npm@antv/graphin
3.1.53.2.5
npm@antv/graphin-components
2.5.12.6.1
npm@antv/graphin-graphscope
1.1.51.2.5
npm@antv/graphin-icons
1.1.01.2.0
npm@antv/graphlib
2.1.42.2.4
npm@antv/hierarchy
0.8.10.9.1
npm@antv/infographic
0.3.190.4.19
npm@antv/interaction
0.2.50.3.5
npm@antv/istanbul
0.1.00.2.0
npm@antv/knowledge
1.2.41.3.4
npm@antv/l7
2.26.102.27.10
npm@antv/l7-component
2.26.102.27.10
npm@antv/l7-composite-layers
0.18.10.19.1
npm@antv/l7-core
2.26.102.27.10
npm@antv/l7-district
2.4.122.5.12
npm@antv/l7-draw
3.2.53.3.5
npm@antv/l7-editor
1.2.131.3.13
npm@antv/l7-extension-g-layer
1.1.01.2.0
npm@antv/l7-layers
2.26.102.27.10
npm@antv/l7-leaflet
1.1.21.2.2
npm@antv/l7-map
2.26.102.27.10
npm@antv/l7-mapkit
0.6.00.7.0
npm@antv/l7-maps
2.26.102.27.10
npm@antv/l7-mini
2.21.82.22.8
npm@antv/l7-pass
1.1.01.2.0
npm@antv/l7-react
2.5.32.6.3
npm@antv/l7-renderer
2.26.102.27.10
npm@antv/l7-scene
2.26.102.27.10
npm@antv/l7-source
2.26.102.27.10
npm@antv/l7-three
2.26.102.27.10
npm@antv/l7-utils
2.26.102.27.10
npm@antv/l7plot
0.6.110.7.11
npm@antv/l7plot-component
0.1.110.2.11
npm@antv/larkmap
1.6.11.7.1
npm@antv/layout-gpu
1.2.71.3.7
npm@antv/layout-wasm
1.5.21.6.2
npm@antv/li-aiearth-assets
0.5.70.6.7
npm@antv/li-analysis-assets
1.10.11.11.1
npm@antv/li-core-assets
1.4.71.5.7
npm@antv/li-editor
1.7.11.8.1
npm@antv/li-p2
1.9.21.10.2
npm@antv/li-sam-assets
0.2.40.3.4
npm@antv/li-sdk
1.6.11.7.1
npm@antv/lite-insight
2.2.12.3.1
npm@antv/matrix-util
3.1.43.2.4
npm@antv/mcp-server-antv
0.2.80.3.8
npm@antv/mcp-server-chart
0.10.100.11.10
npm@antv/my-f2
2.2.72.3.7
npm@antv/my-f2-pc
0.2.10.3.1
npm@antv/narrative-text-editor
0.3.200.4.20
npm@antv/narrative-text-schema
0.4.70.5.7
npm@antv/narrative-text-vis
0.4.160.5.16
npm@antv/path-util
3.1.13.2.1
npm@antv/react-g
2.2.12.3.1
npm@antv/s2
2.8.12.9.1
npm@antv/s2-react
2.4.12.5.1
npm@antv/s2-react-components
2.2.22.3.2
npm@antv/s2-ssr
0.2.10.3.1
npm@antv/s2-vue
2.3.02.4.0
npm@antv/sam
0.3.00.4.0
npm@antv/scale
0.6.20.7.2
npm@antv/semantic-release-pnpm
1.1.41.2.4
npm@antv/smart-color
0.3.10.4.1
npm@antv/stat
0.1.20.2.2
npm@antv/t8
0.4.00.5.0
npm@antv/thumbnails
2.1.02.2.0
npm@antv/thumbnails-component
2.1.02.2.0
npm@antv/torch
1.1.61.2.6
npm@antv/translator
1.1.11.2.1
npm@antv/util
3.4.113.5.11
npm@antv/vendor
1.1.111.2.11
npm@antv/vis-predict-engine
0.2.10.3.1
npm@antv/webgpu-graph
1.1.01.2.0
npm@antv/word-scale-chart
0.4.40.5.4
npm@antv/wx-f2
2.2.12.3.1
npm@antv/x6
3.2.73.3.7
npm@antv/x6-angular-shape
3.1.13.2.1
npm@antv/x6-components
0.11.70.12.7
npm@antv/x6-react
0.2.260.3.26
npm@antv/x6-react-shape
3.1.13.2.1
npm@antv/x6-vector
1.5.21.6.2
npm@antv/x6-vue-shape
3.1.23.2.2
npm@antv/x6-vue3-shape
1.1.01.2.0
npm@antv/xflow
2.2.132.3.13
npm@antv/xflow-diff
1.1.01.2.0
npm@lint-md/cli
2.1.02.2.0
npm@lint-md/core
2.1.02.2.0
npm@lint-md/parser
0.1.140.2.14
npmai-figure
0.5.00.6.0
npmamapcn
0.2.20.3.2
npmast-plugin
0.1.70.2.7
npmbabel-plugin-version
0.3.30.4.3
npmboring-avatars-vanilla
1.1.21.2.2
npmbyte-parser
1.1.01.2.0
npmcanvas-nest.js
2.1.42.2.4
npmecharts-for-react
3.0.73.1.73.2.7
npmfilesize.js
2.1.02.2.0
npmfixed-round
1.1.21.2.2
npmgantt-for-react
0.3.00.4.0
npmjest-canvas-mock
2.5.32.6.32.7.3
npmjest-date-mock
1.0.111.1.111.2.11
npmjest-electron
0.2.120.3.12
npmjest-expect
0.1.10.2.1
npmjest-less-loader
0.3.00.4.0
npmjest-random-mock
1.1.01.2.0
npmjest-url-loader
0.2.00.3.0
npmlimit-size
0.2.40.3.4
npmlint-md
0.3.00.4.0
npmlint-md-cli
0.2.20.3.2
npmmcp-echarts
0.8.10.9.1
npmmcp-mermaid
0.5.10.6.1
npmmiz
1.1.11.2.1
npmonfire.js
2.1.12.2.1
npmreact-adsense
0.2.00.3.0
npmrelationship.js
1.3.91.4.9
npmribbon.js
1.1.2
npmsize-sensor
1.0.41.1.41.2.4
npmslice.js
1.2.11.3.1
npmtimeago-react
3.1.73.2.7
npmtimeago.js
4.1.24.2.2
npmword-width
1.1.11.2.1
npmxmorse
1.1.01.2.0
npm-2026-05-19-antv-mini-shai-huludSource advisory
Critical19 May 2026
1 package tracked
Microsoft `durabletask` PyPI compromised - TeamPCP Mini Shai-Hulud stage-2 dropper
Three malicious versions of durabletask - Microsoft's Python SDK for Azure Durable Functions (~417K monthly downloads) - were uploaded directly to PyPI inside a 35-minute window on 2026-05-19. None correspond to any git tag or CI run; the attacker bypassed Microsoft's pipeline with a stolen PyPI API token. Stage-2 is the full Mini Shai-Hulud credential-stealer with dedicated cloud-secret collectors. Attributed to TeamPCP. Last clean release: 1.4.0.
PyPI
Affected packages1 package · 3 versions
PyPIdurabletask
1.4.11.4.21.4.3
pypi-2026-05-19-durabletask-teampcpSource advisory
Critical19 May 2026
2 packages tracked
actions-cool/issues-helper + maintain-one-comment - every tag retargeted to TeamPCP imposter commit
On 2026-05-19 an attacker with push access to the actions-cool GitHub org force-moved every tag in actions-cool/issues-helper (53 tags, including the floating v1 / v2) and actions-cool/maintain-one-comment (15 tags) to a single imposter commit. Any workflow pinned to a tag - not a full commit SHA - pulled the imposter dist/index.js, which dumps Runner.Worker memory to exfiltrate GitHub Actions secrets. Shares C2 (t.m-kosche.com) with the same-day @antv and durabletask waves; attributed to TeamPCP.
GitHub Actions
Affected packages2 packages · 0 versions
GitHub Actionsactions-cool/issues-helper
GitHub Actionsactions-cool/maintain-one-comment
github-actions-2026-05-19-actions-cool-tag-hijackSource advisory
High19 May 2026
1 package tracked
shopsprint/decimal Go typosquat ships a DNS-TXT command-and-control backdoor
Socket disclosed a long-running Go typosquat of github.com/shopspring/decimal published as github.com/shopsprint/decimal (single-letter swap, t for g). The typosquat was registered 2017-11-08 and was weaponised on 2023-08-19 in v1.3.3, which adds a malicious init() that polls a free-dynamic-DNS subdomain for TXT-record commands every five minutes and executes the response via os/exec. Dwell time before disclosure: ~33 months.
Go
Affected packages1 package · 1 version
Gogithub.com/shopsprint/decimal
v1.3.3
go-2026-05-19-shopsprint-decimal-dns-backdoorSource advisory
Critical18 May 2026
1 package tracked
Nx Console (nrwl.angular-console) 18.95.0 hijacked via TanStack-stolen GitHub creds
A malicious Nx Console v18.95.0 (publisher nrwl, ~2.2M installs across VS Code, Cursor, and JetBrains) shipped to both the VS Code Marketplace and Open VSX on 2026-05-18, live for ~18–36 minutes. Every workspace open fetched a 498KB Mini Shai-Hulud stage-2 dropper from an orphan commit in nrwl/nx. Nx telemetry estimates ~6,000 users received the build. Root cause: the May 11 TanStack compromise leaked one Nx Console maintainer's GitHub CLI credentials. Tracked as GHSA-c9j4-9m59-847w / CVE-2026-48027.
Open VSX
Affected packages1 package · 1 version
Open VSXnrwl.angular-console
18.95.0
openvsx-2026-05-18-nx-console-nrwl-angular-consoleSource advisory
Critical18 May 2026
10 packages tracked
Megalodon: automated CI/CD workflow injection backdoors 5,561 GitHub repos, propagates to @tiledesk/tiledesk-server on npm
On 2026-05-18 an automated campaign nicknamed Megalodon pushed 5,718 commits to 5,561 public GitHub repos in six hours, injecting GitHub Actions workflows that exfiltrate CI secrets to 216.126.225.129:8443. The legitimate Tiledesk maintainer then released @tiledesk/tiledesk-server 2.18.6–2.18.12 from the poisoned source - propagating the backdoor to every downstream npm install.
GitHub Actionsnpm
Affected packages10 packages · 7 versions
npm@tiledesk/tiledesk-server
2.18.62.18.72.18.82.18.92.18.102.18.112.18.12
GitHub Actionstiledesk/tiledesk-ai
GitHub Actionstiledesk/tiledesk-campaign-dashboard
GitHub Actionstiledesk/tiledesk-community-app
GitHub Actionstiledesk/tiledesk-dashboard
GitHub Actionstiledesk/tiledesk-docker-proxy
GitHub Actionstiledesk/tiledesk-helpcenter-template
GitHub Actionstiledesk/tiledesk-llm
GitHub Actionstiledesk/tiledesk-server
GitHub Actionstiledesk/tiledesk-telegram-connector
multi-2026-05-18-megalodon-tiledeskSource advisory
High16 May 2026
4 packages tracked
Leaked Shai-Hulud + Phantom Bot copycats from npm user deadcode09284814
Three days after TeamPCP open-sourced the Shai-Hulud worm code (2026-05-13), npm publisher deadcode09284814 pushed four malicious packages on 2026-05-16: @deadcode09284814/axios-util, axois-utils, chalk-tempalte, and color-style-utils. chalk-tempalte is the first documented in-the-wild Shai-Hulud clone - a near-verbatim copy of the leaked source with a swapped C2. Tradecraft is well below TeamPCP standard; this is the first copycat wave riding the leak.
npm
Affected packages4 packages · 21 versions
npm@deadcode09284814/axios-util
1.0.01.0.1
npmaxois-utils
1.0.41.0.51.0.61.0.71.0.81.0.9
npmchalk-tempalte
1.0.141.0.151.0.161.0.171.0.191.0.20
npmcolor-style-utils
1.0.31.0.41.0.51.0.61.0.71.0.81.0.9
npm-2026-05-16-shai-hulud-leak-copycats-deadcodeSource advisory
Critical14 May 2026
1 package tracked
node-ipc dormant-maintainer takeover via expired email domain
On 2026-05-14 three malicious node-ipc releases (9.1.6, 9.2.3, 12.0.1) were published from a dormant maintainer account atiertant. The attacker re-registered the expired atlantis-software.net domain on 2026-05-07 and used npm's password-reset flow to seize publish rights. The payload fires on every require("node-ipc") (no lifecycle hook) and exfiltrates 90+ credential categories via DNS TXT queries. 12.0.1 was tagged latest, so any unpinned install during the ~60-second window pulled the backdoor. ~822K weekly downloads.
npm
Affected packages1 package · 3 versions
npmnode-ipc
9.1.69.2.312.0.1
npm-2026-05-14-node-ipc-dormant-takeoverSource advisory
Critical11 May 2026
177 packages tracked
TanStack + @uipath mini-Shai-Hulud compromise
On 2026-05-11 between 19:20 and 19:26 UTC, TeamPCP pushed malicious versions across @tanstack/*, @uipath/*, @mistralai/*, and many smaller scopes by chaining pull_request_target, GitHub Actions cache poisoning, and runtime OIDC-token extraction from a runner. Same Mini Shai-Hulud credential-stealer as the April SAP campaign. Final tally: 177 packages, 403 versions, >518M cumulative downloads. OpenAI confirmed two compromised employee devices and rotated platform code-signing certificates.
npmPyPI
Affected packages179 packages · 413 versions
npm@beproduct/nestjs-auth
0.1.20.1.30.1.40.1.50.1.60.1.70.1.80.1.90.1.100.1.110.1.120.1.130.1.140.1.150.1.160.1.170.1.180.1.19
npm@cap-js/db-service
2.10.1
npm@cap-js/postgres
2.2.2
npm@cap-js/sqlite
2.2.2
npm@dirigible-ai/sdk
0.6.20.6.3
npm@draftauth/client
0.2.10.2.2
npm@draftauth/core
0.13.10.13.2
npm@draftlab/auth
0.24.10.24.2
npm@draftlab/auth-router
0.5.10.5.2
npm@draftlab/db
0.16.10.16.2
npm@mesadev/rest
0.28.3
npm@mesadev/saguaro
0.4.22
npm@mesadev/sdk
0.28.3
npm@mistralai/mistralai
2.2.22.2.32.2.4
npm@mistralai/mistralai-azure
1.7.11.7.21.7.3
npm@mistralai/mistralai-gcp
1.7.11.7.21.7.3
npm@ml-toolkit-ts/preprocessing
1.0.21.0.3
npm@ml-toolkit-ts/xgboost
1.0.31.0.4
npm@opensearch-project/opensearch
3.5.33.6.23.7.03.8.0
npm@squawk/airport-data
0.7.40.7.50.7.60.7.70.7.8
npm@squawk/airports
0.6.20.6.30.6.40.6.50.6.6
npm@squawk/airspace
0.8.10.8.20.8.30.8.40.8.5
npm@squawk/airspace-data
0.5.30.5.40.5.50.5.60.5.7
npm@squawk/airway-data
0.5.40.5.50.5.60.5.70.5.8
npm@squawk/airways
0.4.20.4.30.4.40.4.50.4.6
npm@squawk/fix-data
0.6.40.6.50.6.60.6.70.6.8
npm@squawk/fixes
0.3.20.3.30.3.40.3.50.3.6
npm@squawk/flight-math
0.5.40.5.50.5.60.5.70.5.8
npm@squawk/flightplan
0.5.20.5.30.5.40.5.50.5.6
npm@squawk/geo
0.4.40.4.50.4.60.4.70.4.8
npm@squawk/icao-registry
0.5.20.5.30.5.40.5.50.5.6
npm@squawk/icao-registry-data
0.8.40.8.50.8.60.8.70.8.8
npm@squawk/mcp
0.9.10.9.20.9.30.9.40.9.5
npm@squawk/navaid-data
0.6.40.6.50.6.60.6.70.6.8
npm@squawk/navaids
0.4.20.4.30.4.40.4.50.4.6
npm@squawk/notams
0.3.60.3.70.3.80.3.90.3.10
npm@squawk/procedure-data
0.7.30.7.40.7.50.7.60.7.7
npm@squawk/procedures
0.5.20.5.30.5.40.5.50.5.6
npm@squawk/types
0.8.10.8.20.8.30.8.40.8.5
npm@squawk/units
0.4.30.4.40.4.50.4.60.4.7
npm@squawk/weather
0.5.60.5.70.5.80.5.90.5.10
npm@supersurkhet/cli
0.0.20.0.30.0.40.0.50.0.60.0.7
npm@supersurkhet/sdk
0.0.20.0.30.0.40.0.50.0.60.0.7
npm@tallyui/components
1.0.11.0.21.0.3
npm@tallyui/connector-medusa
1.0.11.0.21.0.3
npm@tallyui/connector-shopify
1.0.11.0.21.0.3
npm@tallyui/connector-vendure
1.0.11.0.21.0.3
npm@tallyui/connector-woocommerce
1.0.11.0.21.0.3
npm@tallyui/core
0.2.10.2.20.2.3
npm@tallyui/database
1.0.11.0.21.0.3
npm@tallyui/pos
0.1.10.1.20.1.3
npm@tallyui/storage-sqlite
0.2.10.2.20.2.3
npm@tallyui/theme
0.2.10.2.20.2.3
npm@tanstack/arktype-adapter
1.166.121.166.15
npm@tanstack/eslint-plugin-router
1.161.91.161.12
npm@tanstack/eslint-plugin-start
0.0.40.0.7
npm@tanstack/history
1.161.91.161.12
npm@tanstack/nitro-v2-vite-plugin
1.154.121.154.15
npm@tanstack/react-router
1.169.51.169.8
npm@tanstack/react-router-devtools
1.166.161.166.19
npm@tanstack/react-router-ssr-query
1.166.151.166.18
npm@tanstack/react-start
1.167.681.167.71
npm@tanstack/react-start-client
1.166.511.166.54
npm@tanstack/react-start-rsc
0.0.470.0.50
npm@tanstack/react-start-server
1.166.551.166.58
npm@tanstack/router-cli
1.166.461.166.49
npm@tanstack/router-core
1.169.51.169.8
npm@tanstack/router-devtools
1.166.161.166.19
npm@tanstack/router-devtools-core
1.167.61.167.9
npm@tanstack/router-generator
1.166.451.166.48
npm@tanstack/router-plugin
1.167.381.167.41
npm@tanstack/router-ssr-query-core
1.168.31.168.6
npm@tanstack/router-utils
1.161.111.161.14
npm@tanstack/router-vite-plugin
1.166.531.166.56
npm@tanstack/solid-router
1.169.51.169.8
npm@tanstack/solid-router-devtools
1.166.161.166.19
npm@tanstack/solid-router-ssr-query
1.166.151.166.18
npm@tanstack/solid-start
1.167.651.167.68
npm@tanstack/solid-start-client
1.166.501.166.53
npm@tanstack/solid-start-server
1.166.541.166.57
npm@tanstack/start-client-core
1.168.51.168.8
npm@tanstack/start-fn-stubs
1.161.91.161.12
npm@tanstack/start-plugin-core
1.169.231.169.26
npm@tanstack/start-server-core
1.167.331.167.36
npm@tanstack/start-static-server-functions
1.166.441.166.47
npm@tanstack/start-storage-context
1.166.381.166.41
npm@tanstack/valibot-adapter
1.166.121.166.15
npm@tanstack/virtual-file-routes
1.161.101.161.13
npm@tanstack/vue-router
1.169.51.169.8
npm@tanstack/vue-router-devtools
1.166.161.166.19
npm@tanstack/vue-router-ssr-query
1.166.151.166.18
npm@tanstack/vue-start
1.167.611.167.64
npm@tanstack/vue-start-client
1.166.461.166.49
npm@tanstack/vue-start-server
1.166.501.166.53
npm@tanstack/zod-adapter
1.166.121.166.15
npm@taskflow-corp/cli
0.1.240.1.250.1.260.1.270.1.280.1.29
npm@tolka/cli
1.0.21.0.31.0.41.0.51.0.6
npm@uipath/access-policy-sdk
0.3.1
npm@uipath/access-policy-tool
0.3.1
npm@uipath/admin-tool
0.1.1
npm@uipath/agent-sdk
1.0.2
npm@uipath/agent-tool
1.0.1
npm@uipath/agent.sdk
0.0.18
npm@uipath/aops-policy-tool
0.3.1
npm@uipath/ap-chat
1.5.7
npm@uipath/api-workflow-tool
1.0.1
npm@uipath/apollo-core
5.9.2
npm@uipath/apollo-react
4.24.5
npm@uipath/apollo-wind
2.16.2
npm@uipath/auth
1.0.1
npm@uipath/case-tool
1.0.1
npm@uipath/cli
1.0.1
npm@uipath/codedagent-tool
1.0.1
npm@uipath/codedagents-tool
0.1.12
npm@uipath/codedapp-tool
1.0.1
npm@uipath/common
1.0.1
npm@uipath/context-grounding-tool
0.1.1
npm@uipath/data-fabric-tool
1.0.2
npm@uipath/docsai-tool
1.0.1
npm@uipath/filesystem
1.0.1
npm@uipath/flow-tool
1.0.2
npm@uipath/functions-tool
1.0.1
npm@uipath/gov-tool
0.3.1
npm@uipath/identity-tool
0.1.1
npm@uipath/insights-sdk
1.0.1
npm@uipath/insights-tool
1.0.1
npm@uipath/integrationservice-sdk
1.0.2
npm@uipath/integrationservice-tool
1.0.2
npm@uipath/llmgw-tool
1.0.1
npm@uipath/maestro-sdk
1.0.1
npm@uipath/maestro-tool
1.0.1
npm@uipath/orchestrator-tool
1.0.1
npm@uipath/packager-tool-apiworkflow
0.0.19
npm@uipath/packager-tool-bpmn
0.0.9
npm@uipath/packager-tool-case
0.0.9
npm@uipath/packager-tool-connector
0.0.19
npm@uipath/packager-tool-flow
0.0.19
npm@uipath/packager-tool-functions
0.1.1
npm@uipath/packager-tool-webapp
1.0.6
npm@uipath/packager-tool-workflowcompiler
0.0.16
npm@uipath/packager-tool-workflowcompiler-browser
0.0.34
npm@uipath/platform-tool
1.0.1
npm@uipath/project-packager
1.1.16
npm@uipath/resource-tool
1.0.1
npm@uipath/resourcecatalog-tool
0.1.1
npm@uipath/resources-tool
0.1.11
npm@uipath/robot
1.3.4
npm@uipath/rpa-legacy-tool
1.0.1
npm@uipath/rpa-tool
0.9.5
npm@uipath/solution-packager
0.0.35
npm@uipath/solution-tool
1.0.1
npm@uipath/solutionpackager-sdk
1.0.11
npm@uipath/solutionpackager-tool-core
0.0.34
npm@uipath/tasks-tool
1.0.1
npm@uipath/telemetry
0.0.7
npm@uipath/test-manager-tool
1.0.2
npm@uipath/tool-workflowcompiler
0.0.12
npm@uipath/traces-tool
1.0.1
npm@uipath/ui-widgets-multi-file-upload
1.0.1
npm@uipath/uipath-python-bridge
1.0.1
npm@uipath/vertical-solutions-tool
1.0.1
npm@uipath/vss
0.1.6
npm@uipath/widget.sdk
1.2.3
npmagentwork-cli
0.1.40.1.5
npmcmux-agent-mcp
0.1.30.1.40.1.50.1.60.1.70.1.8
npmcross-stitch
1.1.31.1.41.1.51.1.61.1.7
npmgit-branch-selector
1.3.31.3.41.3.51.3.61.3.7
npmgit-git-git
1.0.81.0.91.0.101.0.111.0.12
npmguardrails-ai
0.10.1
PyPIguardrails-ai
0.10.1
npmintercom-client
7.0.4
npmmbt
1.2.48
npmmistralai
2.4.6
PyPImistralai
2.4.6
npmml-toolkit-ts
1.0.41.0.5
npmnextmove-mcp
0.1.30.1.40.1.50.1.60.1.7
npmsafe-action
0.8.30.8.4
npmts-dna
3.0.13.0.23.0.33.0.43.0.5
npmwot-api
0.8.10.8.20.8.30.8.4
npm-2026-05-shai-hulud-tanstackSource advisory
Medium11 May 2026
Feed-only · no version-specific detection
RubyGems account-creation flood + GemStuffer data dead-drops force signup suspension
From 2026-05-11–12 an actor abused a RubyGems account-creation flaw to spin up thousands of bot accounts and upload tens of thousands of gems - 500+ confirmed malicious and yanked. Most were empty placeholders or GemStuffer data dead-drops that scraped U.K. council ModernGov portals and re-published the data as .gem archives. RubyGems paused new sign-ups; resolved 2026-05-16.
rubygems-2026-05-11-gemstuffer-floodSource advisory
High8 May 2026
3 packages tracked
OceanLotus-attributed ZiChatBot PyPI droppers: uuid32-utils, colorinal, termncolor with Zulip-API C2
Kaspersky GReAT (2026-05-08) re-attributed three PyPI wheels uploaded by an attacker between 2025-07-16 and 2025-07-22 - uuid32-utils, colorinal, and termncolor - to the Vietnam-aligned OceanLotus (APT32) group. The droppers fetch a Windows DLL or Linux .so, persist via Run-key or crontab, and load ZiChatBot, a Python backdoor that uses public Zulip REST APIs as its C2 channel to blend with normal developer traffic.
PyPI
Affected packages3 packages · 7 versions
PyPIcolorinal
1.0.0
PyPItermncolor
1.0.0
PyPIuuid32-utils
1.0.01.0.11.0.21.0.31.0.4
pypi-2026-05-08-oceanlotus-zichatbot-zulip-c2Source advisory
High5 May 2026
1 package tracked
Sicoob.Sdk NuGet impersonator exfiltrates Brazilian banking PFX certificates and passwords via Sentry telemetry abuse
Sicoob.Sdk 2.0.0–2.0.4 (published to NuGet between 2026-05-05 and 2026-05-06 by an account also named sicoob) posed as the official C# SDK for Brazilian credit cooperative Sicoob. When a developer constructed SicoobClient with a client ID, PFX path and PFX password, the embedded Sicoob.Sdk.dll base64-encoded the PFX file and POSTed it together with the client ID and plaintext PFX password to an attacker-controlled Sentry endpoint. NuGet blocked the package after Socket disclosure on 2026-05-29.
NuGet
Affected packages1 package · 5 versions
NuGetSicoob.Sdk
2.0.02.0.12.0.22.0.32.0.4
nuget-2026-05-05-sicoob-sdk-banking-impersonatorSource advisory
High1 May 2026
16 packages tracked
BufferZoneCorp sleeper attack on RubyGems + Go modules
Socket disclosed a coordinated sleeper-package campaign attributed to the GitHub org BufferZoneCorp (and RubyGems user knot-theory). Initially-clean Ruby gems and Go modules were updated to malicious versions. The Ruby side harvests env vars, SSH keys, AWS secrets, .npmrc, .netrc, GitHub CLI config, and RubyGems credentials; the Go side tampers with GitHub Actions workflows, injects fake executables, and adds SSH persistence via authorized_keys. First confirmed 2026 RubyGems + Go module supply-chain campaign.
GoRubyGems
Affected packages16 packages · 0 versions
Gogithub.com/BufferZoneCorp/config-loader
Gogithub.com/BufferZoneCorp/go-envconfig
Gogithub.com/BufferZoneCorp/go-metrics-sdk
Gogithub.com/BufferZoneCorp/go-retryablehttp
Gogithub.com/BufferZoneCorp/go-stdlib-ext
Gogithub.com/BufferZoneCorp/go-weather-sdk
Gogithub.com/BufferZoneCorp/grpc-client
Gogithub.com/BufferZoneCorp/log-core
Gogithub.com/BufferZoneCorp/net-helper
RubyGemsknot-activesupport-logger
RubyGemsknot-date-utils-rb
RubyGemsknot-devise-jwt-helper
RubyGemsknot-rack-session-store
RubyGemsknot-rails-assets-pipeline
RubyGemsknot-rspec-formatter-json
RubyGemsknot-simple-formatter
multi-2026-05-01-bufferzonecorp-rubygems-goSource advisory
Critical30 Apr 2026
3 packages tracked
PyTorch Lightning + intercom-client + intercom-php coordinated push
Mini Shai-Hulud wave 2: coordinated April 30 release of lightning 2.6.2/2.6.3 (PyPI), intercom-client 7.0.4/7.0.5 (npm), and intercom/intercom-php 5.0.2 (Packagist) carrying the same Bun-based credential stealer used in the SAP/@cap-js wave. ~11.7MB router_runtime.js fires preinstall on npm; a .pth file fires at every Python import on PyPI. Worm propagation via stolen GitHub PATs labelled "OhNoWhatsGoingOnWithGitHub:".
npmPackagistPyPI
Affected packages3 packages · 5 versions
npmintercom-client
7.0.47.0.5
Packagistintercom/intercom-php
5.0.2
PyPIlightning
2.6.22.6.3
multi-2026-04-30-mini-shai-hulud-wave2Source advisory
High29 Apr 2026
10 packages tracked
DPRK "PromptMink" campaign uses AI agents to insert @validate-sdk/v2 dependency
ReversingLabs traced a DPRK Famous Chollima / UNC1069 campaign that began with @hash-validator/v2 in Sept 2025 and evolved through Feb 28, 2026 to insert @validate-sdk/v2 as the malicious dependency of benign-looking "bait" SDKs aimed at AI coding agents. One AI-authored commit pulled @solana-launchpad/sdk into a crypto trading repo. Phase 4 in March 2026 used Rust NAPI modules and 85MB Node SEA bundles to exfiltrate full source trees. 300+ malicious package versions across 60+ unique packages observed.
npmPyPI
Affected packages10 packages · 36 versions
npm@hash-validator/v2
npm@meme-sdk/trade
1.0.01.0.1
npm@pumpfun-ipfs/sdk
npm@solana-ipfs/sdk
npm@solana-launchpad/sdk
npm@solmasterv3/solana-metadata-sdk
npm@validate-ethereum-address/core
1.0.31.0.41.0.51.0.6
npm@validate-sdk/v2
1.22.111.22.121.22.131.22.141.22.151.22.161.22.171.22.181.22.191.22.201.22.211.22.221.22.231.22.241.22.251.22.261.22.271.22.281.22.291.22.301.22.31
npm@validator-sdk/pubkey
1.0.01.0.21.0.31.0.41.0.51.0.61.0.71.0.8
PyPIscraper-npm
1.0.4
multi-2026-04-29-promptmink-validate-sdkSource advisory
Critical29 Apr 2026
4 packages tracked
SAP / @cap-js mini-Shai-Hulud campaign
Mini-Shai-Hulud-style attack against SAP-related npm packages on 2026-04-29 09:55–12:14 UTC. Preinstall setup.mjs downloads the Bun runtime, runs an obfuscated execution.js that exfils GitHub/npm tokens, AWS/Azure/GCP secrets, Kubernetes tokens, and browser passwords via the GitHub GraphQL API. Includes a Russian-locale guardrail and persistence via .claude/ and .vscode/ poisoning.
npm
Affected packages4 packages · 4 versions
npm@cap-js/db-service
2.10.1
npm@cap-js/postgres
2.2.2
npm@cap-js/sqlite
2.2.2
npmmbt
1.2.48
npm-2026-04-sap-cap-jsSource advisory
Critical24 Apr 2026
2 packages tracked
elementary-data PyPI package backdoored via GitHub Actions injection
An attacker (account realtungtungtungsahur) exploited a script-injection flaw in the elementary-data release workflow via PR comment, then used the workflow token to forge release commit b1e4b1f3 and trigger the legitimate publishing pipeline. PyPI elementary-data 0.23.3 and ghcr.io/elementary-data/elementary 0.23.3 + latest shipped a ~245 KB obfuscated payload in elementary.pth. Clean 0.23.4 published April 25.
DockerPyPI
Affected packages2 packages · 3 versions
PyPIelementary-data
0.23.3
Dockerghcr.io/elementary-data/elementary
0.23.3latest
pypi-2026-04-24-elementary-dataSource advisory
High23 Apr 2026
1 package tracked
js-logger-pack npm worm uses Hugging Face datasets as malware CDN + exfil store
JFrog found 27 malicious versions of js-logger-pack (1.1.0-1.1.27) abusing the Hugging Face repo Lordplay/system-releases to fetch cross-platform binaries (Windows/macOS x64/macOS ARM64/Linux) and upload stolen data to private datasets. The malware adds keylogging, clipboard capture, browser-session and Telegram Desktop theft, plus an operator command channel.
npm
Affected packages1 package · 28 versions
npmjs-logger-pack
1.1.01.1.11.1.21.1.31.1.41.1.51.1.61.1.71.1.81.1.91.1.101.1.111.1.121.1.131.1.141.1.151.1.161.1.171.1.181.1.191.1.201.1.211.1.221.1.231.1.241.1.251.1.261.1.27
npm-2026-04-23-js-logger-pack-huggingfaceSource advisory
Critical22 Apr 2026
1 package tracked
Xinference PyPI package backdoored on import
JFrog flagged three consecutive xinference releases (2.6.0-2.6.2) on PyPI carrying a TeamPCP-style payload embedded in xinference/__init__.py that fires on import. The malware base64-encodes a stage-1 wrapper containing the comment # hacked by teampcp, then spawns a detached subprocess that bundles harvested data into love.tar.gz and POSTs it with a custom X-QT-SR: 14 header. TeamPCP publicly denied involvement, claiming a copycat. 600,000+ downloads of malicious wheels.
PyPI
Affected packages1 package · 3 versions
PyPIxinference
2.6.02.6.12.6.2
pypi-2026-04-22-xinference-teampcpSource advisory
Critical22 Apr 2026
3 packages tracked
Checkmarx KICS Docker images + Open VSX extensions compromised (TeamPCP)
Docker and Socket jointly disclosed a multi-stage compromise of Checkmarx KICS Docker images and Checkmarx VS Code / Open VSX extensions. Trojanised extensions silently install an MCP addon executed via Bun, while the Docker images include a modified KICS binary that encrypts scan output and exfiltrates it. TeamPCP claimed responsibility.
DockerOpen VSX
Affected packages3 packages · 11 versions
Open VSXcheckmarx.ast-results
2.63.02.66.0
Open VSXcheckmarx.cx-dev-assist
1.17.01.19.0
Dockercheckmarx/kics
2.1.202.1.20-debian2.1.212.1.21-debianalpinedebianlatest
multi-2026-04-22-checkmarx-kics-vsx-dockerSource advisory
Critical22 Apr 2026
1 package tracked
@bitwarden/cli 2026.4.0 hijacked via Checkmarx GitHub Actions breach
TeamPCP pushed a malicious @bitwarden/cli@2026.4.0 to npm between 17:57 and 19:30 ET on April 22, exploiting Bitwarden's use of the breached checkmarx/ast-github-action. bw_setup.js fetched Bun 1.3.13 from GitHub and ran a payload that targeted SSH, Git, npm, AWS/GCP/Azure, GitHub Actions secrets, and AI/MCP configs (.claude.json, .kiro/settings/mcp.json), exfiltrating via audit.checkmarx.cx. Live ~90 minutes; Bitwarden confirmed no end-user vault data was accessed.
npm
Affected packages1 package · 1 version
npm@bitwarden/cli
2026.4.0
npm-2026-04-22-bitwarden-cli-teampcpSource advisory
Critical21 Apr 2026
6 packages tracked
CanisterSprawl: self-propagating npm worm hits pgserve + Namastex packages
Socket and StepSecurity disclosed CanisterSprawl, a self-propagating npm worm that compromised at least 16 versions across Namastex Labs and related publishers from 21 April 2026. The postinstall hook harvests 38 env vars and filesystem secrets, encrypts via AES-256-CBC + RSA-4096, and exfiltrates to an Internet Computer Protocol canister. Stolen npm tokens are reused to publish further malicious versions. Tradecraft matches the earlier TeamPCP CanisterWorm campaign.
npm
Affected packages6 packages · 16 versions
npm@automagik/genie
4.260421.334.260421.344.260421.354.260421.364.260421.374.260421.384.260421.39
npm@fairwords/loopback-connector-es
1.4.31.4.4
npm@fairwords/websocket
1.0.381.0.39
npm@openwebconcept/design-tokens
1.0.3
npm@openwebconcept/theme-owc
1.0.3
npmpgserve
1.1.111.1.121.1.13
npm-2026-04-21-canisterworm-pgserve-namastexSource advisory
High15 Apr 2026
36 packages tracked
36 fake Strapi plugins on npm deploy persistent implants
Four sock-puppet npm accounts (umarbek1233, kekylf12, tikeqemif26, umar_bektembiev1) uploaded 36 packages over a ~13-hour window impersonating Strapi CMS plugins. Payload evolution moved through 8 variants targeting Redis RCE with cron injection, Docker container escapes, PostgreSQL exploitation on hosts named prod-strapi, Python reverse shells on port 4444, and SSH-key backdoors.
npm
Affected packages36 packages · 0 versions
npmstrapi-plugin-advanced-uuid
npmstrapi-plugin-api
npmstrapi-plugin-blurhash
npmstrapi-plugin-cms-tools
npmstrapi-plugin-config
npmstrapi-plugin-content-sync
npmstrapi-plugin-core
npmstrapi-plugin-cron
npmstrapi-plugin-database
npmstrapi-plugin-debug-tools
npmstrapi-plugin-events
npmstrapi-plugin-finseven
npmstrapi-plugin-form
npmstrapi-plugin-guardarian-ext
npmstrapi-plugin-health
npmstrapi-plugin-health-check
npmstrapi-plugin-hextest
npmstrapi-plugin-hooks
npmstrapi-plugin-locale
npmstrapi-plugin-logger
npmstrapi-plugin-monitor
npmstrapi-plugin-nordica
npmstrapi-plugin-nordica-api
npmstrapi-plugin-nordica-cms
npmstrapi-plugin-nordica-deep
npmstrapi-plugin-nordica-lite
npmstrapi-plugin-nordica-recon
npmstrapi-plugin-nordica-stage
npmstrapi-plugin-nordica-sync
npmstrapi-plugin-nordica-tools
npmstrapi-plugin-nordica-vhost
npmstrapi-plugin-notify
npmstrapi-plugin-seed
npmstrapi-plugin-server
npmstrapi-plugin-sitemap-gen
npmstrapi-plugin-sync
npm-2026-04-15-strapi-pluginsSource advisory
High15 Apr 2026
1 package tracked
@kindo/selfbot npm package delivers XWorm RAT via 5-stage Astral Warfare chain
JFrog identified @kindo/selfbot (XRAY-964727), a video-game-themed Discord selfbot npm package. A 5-stage chain (JS downloader → 250KB obfuscated batch → PowerShell process injection → XOR-decoded shellcode → XWormClient .NET RAT) installed itself against explorer.exe with AMSI/ETW evasion.
npm
Affected packages1 package · 5 versions
npm@kindo/selfbot
1.0.01.0.11.0.21.0.31.0.4
npm-2026-04-15-kindo-selfbot-xwormSource advisory
High14 Apr 2026
5 packages tracked
5 NuGet packages impersonate Chinese .NET UI libraries with infostealer payload
NuGet publisher bmrxntfj shipped five packages on 14 April 2026 within ~13 seconds, grafting a .NET Reactor-protected infostealer onto decompiled legitimate libraries. Across 219 total versions they accumulated ~65k downloads, targeting browser creds, crypto wallets, and SSH keys on Windows .NET dev hosts.
NuGet
Affected packages5 packages · 5 versions
NuGetIR.DantUI
2.1.55
NuGetIR.Infrastructure.Core
2.1.55
NuGetIR.Infrastructure.DataService.Core
2.1.55
NuGetIR.iplus32
2.1.55
NuGetIR.OscarUI
2.1.55
nuget-2026-04-14-chinese-ui-impersonatorsSource advisory
High7 Apr 2026
14 packages tracked
DPRK Contagious Interview campaign expands across 5 ecosystems
Socket disclosed a fresh wave of DPRK Contagious Interview / FAMOUS CHOLLIMA packages spanning npm, PyPI, Go modules, crates.io, and Packagist. They impersonate logging / license developer tooling and act as staged loaders for credential stealers and RATs across Windows, macOS and Linux. The Windows variant deploys a keylogger and AnyDesk for hands-on access.
crates.ioGonpmPackagistPyPI
Affected packages14 packages · 6 versions
PyPIapachelicense
0.1a1
npmdebug-fmt
npmdebug-glitz
npmdev-log-core
1.0.5
PyPIfluxhttp
Gogithub.com/aokisasakidev/mit-license-pkg
1.0.2
Gogithub.com/golangorg/formstash
1.0.5
Packagistgolangorg/logkit
PyPIlicense-utils-kit
0.1rc3
npmlogger-base
npmlogkitx
crates.iologtrace
1.0.2
PyPIlogutilkit
npmpino-debugger
multi-2026-04-07-contagious-interview-5-ecosystemsSource advisory
Medium5 Apr 2026
1 package tracked
hermes-px PyPI "privacy" AI proxy steals prompts via stolen university infra
JFrog detected hermes-px, masquerading as a privacy-preserving AI proxy. It routed requests through Tor to a stolen Tunisian university API and bundled a 246K-character Anthropic Claude system prompt rebranded as "AXIOM-1". It simultaneously exfiltrated all prompts/responses unencrypted to a Supabase endpoint, bypassing Tor and exposing user IPs.
PyPI
Affected packages1 package · 0 versions
PyPIhermes-px
pypi-2026-04-05-hermes-pxSource advisory
Critical31 Mar 2026
4 packages tracked
Axios npm compromise (North Korea-nexus RAT)
Lead-maintainer account compromised via social engineering. Two malicious axios releases pulled in plain-crypto-js, whose postinstall fetched a cross-platform RAT from sfrclak[.]com:8000. Microsoft + Google attribute to Sapphire Sleet / UNC1069 (North Korea-nexus). Live for ~3 hours; ~100M weekly downloads in scope.
npm
Affected packages4 packages · 8 versions
npm@qqbrowser/openclaw-qbot
0.0.130
npm@shadanai/openclaw
2026.3.28-22026.3.28-32026.3.31-12026.3.31-2
npmaxios
1.14.10.30.4
npmplain-crypto-js
4.2.1
npm-2026-03-axiosSource advisory
High31 Mar 2026
1 package tracked
LofyGang returns with undicy-http typosquat delivering dual-payload RAT
JFrog tied undicy-http@2.0.0 (a typosquat of undici) to the Brazil-based LofyGang group last seen in 2022. The package pairs a Node.js WebSocket RAT with a native chromelevator.exe binary that uses direct syscalls for process hollowing, then injects browser credential stealers targeting 50+ browsers and 90+ wallet extensions.
npm
Affected packages1 package · 1 version
npmundicy-http
2.0.0
npm-2026-03-31-undicy-lofygangSource advisory
Critical27 Mar 2026
1 package tracked
Telnyx Python SDK hides credential stealer in WAV-file steganography
TeamPCP published malicious telnyx 4.87.1 and 4.87.2 to PyPI on 27 March 2026 (~670k monthly downloads). Trojanised _client.py downloads steganographic payloads disguised as .wav files over plaintext HTTP, extracts the credential stealer, and persists. Windows variant drops msbuild.exe to the Startup folder; Linux variant uses a user-level systemd service. AES-256-CBC + RSA-4096 envelope for exfil.
PyPI
Affected packages1 package · 2 versions
PyPItelnyx
4.87.14.87.2
pypi-2026-03-27-telnyx-teampcpSource advisory
Critical24 Mar 2026
1 package tracked
LiteLLM PyPI backdoored as TeamPCP cascade reaches Python
TeamPCP used credentials harvested from the Trivy compromise to publish trojanised litellm 1.82.7 and 1.82.8 to PyPI on 24 March 2026 (~10:39 and 10:52 UTC). Malicious wheels drop a litellm_init.pth file in site-packages, executing a credential stealer at every Python interpreter start. PyPI quarantined the packages ~40 minutes after publication. Attackers later claimed ~500,000 credentials from this single compromise. LiteLLM averages ~3M daily downloads and ships in ~36% of cloud environments.
PyPI
Affected packages1 package · 2 versions
PyPIlitellm
1.82.71.82.8
pypi-2026-03-24-litellm-teampcpSource advisory
High24 Mar 2026
5 packages tracked
5 npm typosquats target Solana + Ethereum dev libraries, exfil keys to Telegram
npm publisher galedonovan shipped five typosquats of legitimate crypto libraries. Each transparently intercepts private keys passed through normal API calls (Base58 decoding for Solana, Wallet construction for Ethereum), exfiltrates them to a hardcoded Telegram bot, then returns the expected result so functionality looks normal.
npm
Affected packages5 packages · 4 versions
npmbase_xd
npmbase-x-64
0.0.6
npmbs58-basic
6.0.1
npmethersproject-wallet
5.8.1
npmraydium-bs58
1.9.7
npm-2026-03-24-solana-ethereum-typosquatsSource advisory
High23 Mar 2026
2 packages tracked
Checkmarx KICS GitHub Actions trojanised by TeamPCP
Between 12:58 and 16:50 UTC on 23 March 2026, TeamPCP hijacked 35 tags in the Checkmarx ast-github-action and kics-github-action repos to push a credential stealer, leveraging tokens stolen from the Trivy compromise. CI/CD pipelines using either Action during the window executed the stealer before the legitimate scan.
GitHub Actions
Affected packages2 packages · 0 versions
GitHub Actionscheckmarx/ast-github-action
GitHub Actionscheckmarx/kics-github-action
github-actions-2026-03-23-checkmarx-kicsSource advisory
Critical20 Mar 2026
29 packages tracked
CanisterWorm: @emilgroup and @teale.io npm publisher compromise (29+ packages)
An attacker compromised the @emilgroup and @teale.io npm namespaces, replacing 58 package-versions with a Python backdoor that polls an Internet Computer Protocol (ICP) canister for follow-on payloads. The implant persists via user-level systemd and includes worm-style republishing via deploy.js. Wiz later linked the tradecraft to TeamPCP; Socket declined firm attribution.
npm
Affected packages29 packages · 58 versions
npm@emilgroup/account-sdk
1.41.11.41.2
npm@emilgroup/account-sdk-node
1.40.11.40.2
npm@emilgroup/accounting-sdk-node
1.26.11.26.2
npm@emilgroup/api-documentation
1.19.11.19.2
npm@emilgroup/auth-sdk
1.25.11.25.2
npm@emilgroup/auth-sdk-node
1.21.11.21.2
npm@emilgroup/billing-sdk
1.56.11.56.2
npm@emilgroup/billing-sdk-node
1.57.11.57.2
npm@emilgroup/claim-sdk
1.41.11.41.2
npm@emilgroup/claim-sdk-node
1.39.11.39.2
npm@emilgroup/customer-sdk
1.54.11.54.2
npm@emilgroup/customer-sdk-node
1.55.11.55.2
npm@emilgroup/document-sdk
1.45.11.45.2
npm@emilgroup/document-sdk-node
1.43.11.43.2
npm@emilgroup/gdv-sdk
2.6.12.6.2
npm@emilgroup/insurance-sdk
1.97.11.97.2
npm@emilgroup/insurance-sdk-node
1.95.11.95.2
npm@emilgroup/notification-sdk-node
1.4.11.4.2
npm@emilgroup/partner-portal-sdk-node
1.1.11.1.2
npm@emilgroup/partner-sdk-node
1.19.11.19.2
npm@emilgroup/payment-sdk
1.15.11.15.2
npm@emilgroup/payment-sdk-node
1.23.11.23.2
npm@emilgroup/process-manager-sdk-node
1.13.11.13.2
npm@emilgroup/public-api-sdk
1.33.11.33.2
npm@emilgroup/public-api-sdk-node
1.35.11.35.2
npm@emilgroup/tenant-sdk
1.34.11.34.2
npm@emilgroup/tenant-sdk-node
1.33.11.33.2
npm@emilgroup/translation-sdk-node
1.1.11.1.2
npm@teale.io/eslint-config
1.8.91.8.10
npm-2026-03-20-canisterworm-emilgroup-tealeSource advisory
Critical19 Mar 2026
3 packages tracked
Trivy GitHub Action + Docker images compromised - start of TeamPCP cascade
Aqua Security's Trivy scanner was compromised on 19 March 2026 by the threat actor self-identifying as TeamPCP. The attacker force-pushed 76 of 77 tags in aquasecurity/trivy-action (only @0.35.0 survived) and all 7 tags in aquasecurity/setup-trivy to malicious commits, then published trojanised Trivy binary 0.69.4 + Docker images 0.69.5/0.69.6/latest. A stolen Argon-DevOps-Mgt service-account token seeded the downstream LiteLLM, Telnyx, Bitwarden CLI, and Checkmarx compromises.
DockerGitHub Actions
Affected packages3 packages · 4 versions
Dockeraquasec/trivy
0.69.40.69.50.69.6latest
GitHub Actionsaquasecurity/setup-trivy
GitHub Actionsaquasecurity/trivy-action
github-actions-2026-03-19-trivy-teampcp-cascadeSource advisory
High18 Mar 2026
2 packages tracked
GlassWorm sleeper extensions activate on Open VSX
Roughly 40 malicious VS Code extensions surfaced March 14-18, 2026: 20+ new extensions, ~20 previously dormant sleepers activated, plus 11 extensionPack droppers. The campaign hosts VSIX payloads on attacker-controlled GitHub releases to evade registry takedowns. Publishing accounts: laura6909, martina0094, chiara585, francesca898.
Open VSX
Affected packages2 packages · 3 versions
Open VSX96-studio.json-formatter
0.0.20.0.4
Open VSXlauracode.wrap-selected-code
0.0.2
openvsx-2026-03-18-glassworm-sleeperSource advisory
High13 Mar 2026
Feed-only · no version-specific detection
GlassWorm: 72+ Open VSX extensions weaponised via transitive loaders
Socket linked at least 72 additional malicious Open VSX extensions to the GlassWorm campaign. Newer variants use extensionPack / extensionDependencies fields to transitively pull GlassWorm loaders rather than embedding malware directly. Obfuscation rotated to RC4 + base64 with keys delivered in HTTP response headers.
openvsx-2026-03-13-glassworm-transitiveSource advisory
Medium12 Mar 2026
6 packages tracked
6 malicious Packagist OphimCMS themes ship trojanised jQuery and FUNNULL redirects
Six Composer packages from the ophimcms organisation posed as OphimCMS themes containing trojanised jQuery. The payload exfiltrates URLs, injects ads, and redirects mobile traffic via OFAC-sanctioned FUNNULL infrastructure. Combined ~2,750 installs.
Packagist
Affected packages6 packages · 6 versions
Packagistophimcms/theme-dy
1.0.0
Packagistophimcms/theme-legend
1.0.0
Packagistophimcms/theme-motchill
1.0.0
Packagistophimcms/theme-mtyy
1.0.0
Packagistophimcms/theme-pcc
1.2.2
Packagistophimcms/theme-rrdyw
1.0.0
packagist-2026-03-12-ophimcms-themesSource advisory
Medium28 Feb 2026
5 packages tracked
5 malicious Rust crates pose as time utilities to exfiltrate .env files
Five crates published between late February and early March 2026 posed as local time utilities while exfiltrating .env files via curl to a lookalike domain timeapis.io (typosquatting timeapi.io). All packages were 0.1.0 and yanked within hours. Account aliases: gehakax777, dictorudin.
crates.io
Affected packages5 packages · 5 versions
crates.iochrono_anchor
0.1.0
crates.iodnp3times
0.1.0
crates.iotime_calibrator
0.1.0
crates.iotime_calibrators
0.1.0
crates.iotime-sync
0.1.0
crates-2026-02-28-time-utility-typosquatsSource advisory
High27 Feb 2026
26 packages tracked
StegaBin: 26 npm typosquats use Pastebin steganography to deliver Contagious Interview RAT
Socket disclosed 26 typosquatted npm packages tied to North Korea's Contagious Interview / FAMOUS CHOLLIMA cluster. The loader decodes steganographically-encoded Pastebin URLs to resolve C2 hosted across 31 Vercel deployments, then retrieves a 9-module infostealer and RAT toolkit.
npm
Affected packages26 packages · 26 versions
npmargonist
0.41.0
npmbcryptance
6.5.2
npmbee-quarl
2.1.2
npmbubble-core
6.26.2
npmcorstoken
2.14.7
npmdaytonjs
1.11.20
npmether-lint
5.9.4
npmexpressjs-lint
5.3.2
npmfastify-lint
5.8.0
npmformmiderable
3.5.7
npmhapi-lint
19.1.2
npmiosysredis
5.13.2
npmjslint-config
10.22.2
npmjsnwebapptoken
8.40.2
npmkafkajs-lint
2.21.3
npmloadash-lint
4.17.24
npmmqttoken
5.40.2
npmprism-lint
7.4.2
npmpromanage
6.0.21
npmsequelization
6.40.2
npmtyporiem
0.4.17
npmundicy-lint
7.23.1
npmuuindex
13.1.0
npmvitetest-lint
4.1.21
npmwindowston
3.19.2
npmzoddle
4.4.2
npm-2026-02-27-stegabin-contagious-interviewSource advisory
Critical20 Feb 2026
19 packages tracked
SANDWORM_MODE: 19 npm typosquats with self-spreading worm + AI toolchain poisoning
Socket disclosed a Shai-Hulud-style self-propagating worm spread across at least 19 typosquatted npm packages from accounts official334 and javaorg. It harvests CI secrets and crypto keys, propagates via stolen npm/GitHub tokens, and injects prompt-injection logic into MCP servers used by AI coding assistants.
npm
Affected packages19 packages · 19 versions
npmclaud-code
0.2.1
npmcloude
0.3.0
npmcloude-code
0.2.1
npmcrypto-locale
1.0.0
npmcrypto-reader-info
1.0.0
npmdetect-cache
1.0.0
npmformat-defaults
1.0.0
npmhardhta
1.0.0
npmlocale-loader-pro
1.0.0
npmnaniod
1.0.0
npmnode-native-bridge
1.0.0
npmopencraw
2026.2.17
npmparse-compat
1.0.0
npmrimarf
1.0.0
npmscan-store
1.0.0
npmsecp256
1.0.0
npmsuport-color
1.0.1
npmveim
2.46.2
npmyarsg
18.0.1
npm-2026-02-20-sandworm-modeSource advisory
High17 Feb 2026
1 package tracked
cline npm package hijacked via "Clinejection" prompt-injection chain
An attacker abused an unsanitised AI issue-triage GitHub Actions workflow on the Cline repo to poison the release pipeline cache and steal the npm publish token. They published cline@2.3.0 with a postinstall script that globally installed the second-stage package openclaw. ~90k weekly downloads; live for ~8 hours before Cline rotated the token and shipped 2.4.0.
npm
Affected packages1 package · 1 version
npmcline
2.3.0
npm-2026-02-17-cline-clinejectionSource advisory
High11 Feb 2026
30 packages tracked
Lazarus "graphalgo" fake-recruiter campaign (npm + PyPI)
ReversingLabs attributed an ongoing fake-recruiter campaign (active since May 2025, reported Feb 2026) to North Korea's Lazarus Group (overlapping Jade Sleet / UNC4899). Crypto, JavaScript, and Python developers are lured via LinkedIn/Reddit/Facebook into interview "coding tasks" that pull a token-protected RAT loader from npm and PyPI. ~192 malicious packages attributed in total; bigmathutils alone passed 10,000 downloads.
npmPyPI
Affected packages30 packages · 44 versions
npmbigmathex
npmbigmathix
npmbigmathlib
npmbigmathutils
1.0.01.1.0
npmbignumberx
npmbignumex
npmbignumx
PyPIbigpyx
npmgraphalgo
2.2.5-pre2.2.62.2.72.2.82.2.92.2.102.2.11
PyPIgraphalgo-py
3.5.1rc0.dev03.5.23.5.33.5.53.5.6
npmgraphchain
PyPIgraphdict
PyPIgraphex
3.5.73.5.83.5.93.5.10
npmgraphflowx
npmgraphflux
npmgraphhub
npmgraphkitx
npmgraphlibcore
2.2.62.2.72.2.82.2.92.2.102.2.11
PyPIgraphlibx
npmgraphnet
npmgraphnetworkx
2.1.62.1.72.1.82.1.92.1.102.1.11
PyPIgraphnode
npmgraphorbit
npmgraphorithm
2.2.62.2.72.2.82.2.9
npmgraphrix
npmgraphstruct
2.2.62.2.72.2.8
PyPIgraphsync
npmnetstruct
2.1.62.1.8
npmterminal-kleur
npmterminalcolor256
2.0.22.0.32.1.02.2.02.2.6
multi-2026-02-11-lazarus-graphalgoSource advisory
Medium5 Feb 2026
3 packages tracked
Polymarket SDK typosquats on crates.io
Three crates impersonating polymarket-client-sdk were published between 5 and 19 February 2026 and exfiltrated local credential files. The malicious crates were yanked and publisher accounts disabled. Combined downloads stayed under 100, but targeting was high-value (Polymarket / Web3 developers).
crates.io
Affected packages3 packages · 0 versions
crates.iopolymarket-client-sdks
crates.iopolymarket-clients-sdk
crates.iopolymarkets-client-sdk
crates-2026-02-05-polymarket-typosquatsSource advisory
Critical27 Jan 2026
2 packages tracked
dYdX v4-client npm + PyPI compromise (wallet stealer + RAT)
Maintainer credentials for the dYdX decentralized exchange were compromised; malicious versions of the official v4 client were pushed to npm and PyPI in a coordinated release. The npm payload exfiltrates wallet seed phrases through a malicious createRegistry() function. The PyPI variant additionally drops a Python RAT executed on import.
npmPyPI
Affected packages2 packages · 6 versions
npm@dydxprotocol/v4-client-js
1.0.311.15.21.22.13.4.1
PyPIdydx-v4-client
1.1.5.post11.1.5post1
multi-2026-01-27-dydx-compromiseSource advisory
High17 Jan 2026
1 package tracked
sympy-dev PyPI typosquat delivering XMRig cryptominer
A PyPI typosquat of SymPy was published by the account "Nanit" across four versions on Jan 17, 2026. It fetches a remote JSON config, downloads an ELF, and executes it from a memfd to evade disk-based detection. The payload is XMRig mining Monero on infected developer workstations.
PyPI
Affected packages1 package · 4 versions
PyPIsympy-dev
1.2.31.2.41.2.51.2.6
pypi-2026-01-17-sympy-dev-minerSource advisory
Critical15 Sept 2025
197 packages tracked
Original Shai-Hulud npm worm
First successful self-propagating worm in the npm ecosystem. Downstream of the August 2025 s1ngularity/Nx GitHub-token theft. The postinstall hook ran TruffleHog to harvest secrets, opened public GitHub repos named "Shai-Hulud" to publish them, force-converted private repos to public with a "-migration" suffix, and used stolen npm tokens to publish malicious versions of any package the maintainer could access. ~180 unique packages compromised across 300+ versions, including CrowdStrike's own scope (@crowdstrike/*).
npm
Affected packages197 packages · 509 versions
npm@ahmedhfarag/ngx-perfect-scrollbar
20.0.20
npm@ahmedhfarag/ngx-virtual-scroller
4.0.4
npm@art-ws/common
2.0.28
npm@art-ws/config-eslint
2.0.42.0.5
npm@art-ws/config-ts
2.0.72.0.8
npm@art-ws/db-context
2.0.24
npm@art-ws/di
2.0.282.0.32
npm@art-ws/di-node
2.0.13
npm@art-ws/eslint
1.0.51.0.6
npm@art-ws/fastify-http-server
2.0.242.0.27
npm@art-ws/http-server
2.0.212.0.25
npm@art-ws/openapi
0.1.90.1.12
npm@art-ws/package-base
1.0.51.0.6
npm@art-ws/prettier
1.0.51.0.6
npm@art-ws/slf
2.0.152.0.22
npm@art-ws/ssl-info
1.0.91.0.10
npm@art-ws/web-app
1.0.31.0.4
npm@basic-ui-components-stc/basic-ui-components
1.0.5
npm@crowdstrike/commitlint
8.1.18.1.2
npm@crowdstrike/falcon-shoelace
0.4.10.4.2
npm@crowdstrike/foundry-js
0.19.10.19.2
npm@crowdstrike/glide-core
0.34.20.34.3
npm@crowdstrike/logscale-dashboard
1.205.11.205.2
npm@crowdstrike/logscale-file-editor
1.205.11.205.2
npm@crowdstrike/logscale-parser-edit
1.205.11.205.2
npm@crowdstrike/logscale-search
1.205.11.205.2
npm@crowdstrike/tailwind-toucan-base
5.0.15.0.2
npm@ctrl/deluge
7.2.17.2.2
npm@ctrl/golang-template
1.4.21.4.3
npm@ctrl/magnet-link
4.0.34.0.4
npm@ctrl/ngx-codemirror
7.0.17.0.2
npm@ctrl/ngx-csv
6.0.16.0.2
npm@ctrl/ngx-emoji-mart
9.2.19.2.2
npm@ctrl/ngx-rightclick
4.0.14.0.2
npm@ctrl/qbittorrent
9.7.19.7.2
npm@ctrl/react-adsense
2.0.12.0.2
npm@ctrl/shared-torrent
6.3.16.3.2
npm@ctrl/tinycolor
4.1.14.1.2
npm@ctrl/torrent-file
4.1.14.1.2
npm@ctrl/transmission
7.3.1
npm@ctrl/ts-base32
4.0.14.0.2
npm@hestjs/core
0.2.1
npm@hestjs/cqrs
0.1.6
npm@hestjs/demo
0.1.2
npm@hestjs/eslint-config
0.1.2
npm@hestjs/logger
0.1.6
npm@hestjs/scalar
0.1.7
npm@hestjs/validation
0.1.6
npm@nativescript-community/arraybuffers
1.1.61.1.71.1.8
npm@nativescript-community/gesturehandler
2.0.35
npm@nativescript-community/perms
3.0.53.0.63.0.73.0.83.0.9
npm@nativescript-community/sentry
4.6.43
npm@nativescript-community/sqlite
3.5.23.5.33.5.43.5.5
npm@nativescript-community/text
1.6.91.6.101.6.111.6.121.6.13
npm@nativescript-community/typeorm
0.2.300.2.310.2.320.2.33
npm@nativescript-community/ui-collectionview
6.0.6
npm@nativescript-community/ui-document-picker
1.1.271.1.2813.0.32
npm@nativescript-community/ui-drawer
0.1.30
npm@nativescript-community/ui-image
4.5.6
npm@nativescript-community/ui-label
1.3.351.3.361.3.37
npm@nativescript-community/ui-material-bottom-navigation
7.2.727.2.737.2.747.2.75
npm@nativescript-community/ui-material-bottomsheet
7.2.72
npm@nativescript-community/ui-material-core
7.2.727.2.737.2.747.2.757.2.76
npm@nativescript-community/ui-material-core-tabs
7.2.727.2.737.2.747.2.757.2.76
npm@nativescript-community/ui-material-ripple
7.2.727.2.737.2.747.2.75
npm@nativescript-community/ui-material-tabs
7.2.727.2.737.2.747.2.75
npm@nativescript-community/ui-pager
14.1.3614.1.3714.1.38
npm@nativescript-community/ui-pulltorefresh
2.5.42.5.52.5.62.5.7
npm@nexe/config-manager
0.1.1
npm@nexe/eslint-config
0.1.1
npm@nexe/logger
0.1.3
npm@nstudio/angular
20.0.420.0.520.0.6
npm@nstudio/focus
20.0.420.0.520.0.6
npm@nstudio/nativescript-checkbox
2.0.62.0.72.0.82.0.9
npm@nstudio/nativescript-loading-indicator
5.0.15.0.25.0.35.0.4
npm@nstudio/ui-collectionview
5.1.115.1.125.1.135.1.14
npm@nstudio/web
20.0.4
npm@nstudio/web-angular
20.0.4
npm@nstudio/xplat
20.0.520.0.620.0.7
npm@nstudio/xplat-utils
20.0.520.0.620.0.7
npm@operato/board
9.0.369.0.379.0.389.0.399.0.409.0.419.0.429.0.439.0.449.0.459.0.46
npm@operato/data-grist
9.0.299.0.359.0.369.0.37
npm@operato/graphql
9.0.229.0.359.0.369.0.379.0.389.0.399.0.409.0.419.0.429.0.439.0.449.0.459.0.46
npm@operato/headroom
9.0.29.0.359.0.369.0.37
npm@operato/help
9.0.359.0.369.0.379.0.389.0.399.0.409.0.419.0.429.0.439.0.449.0.459.0.46
npm@operato/i18n
9.0.359.0.369.0.37
npm@operato/input
9.0.279.0.359.0.369.0.379.0.389.0.399.0.409.0.419.0.429.0.439.0.449.0.459.0.469.0.479.0.48
npm@operato/layout
9.0.359.0.369.0.37
npm@operato/popup
9.0.229.0.359.0.369.0.379.0.389.0.399.0.409.0.419.0.429.0.439.0.449.0.459.0.469.0.49
npm@operato/pull-to-refresh
9.0.369.0.379.0.389.0.399.0.409.0.419.0.42
npm@operato/shell
9.0.229.0.359.0.369.0.379.0.389.0.39
npm@operato/styles
9.0.29.0.359.0.369.0.37
npm@operato/utils
9.0.229.0.359.0.369.0.379.0.389.0.399.0.409.0.419.0.429.0.439.0.449.0.459.0.469.0.49
npm@teselagen/bio-parsers
0.4.290.4.30
npm@teselagen/bounce-loader
0.3.160.3.17
npm@teselagen/file-utils
0.3.210.3.22
npm@teselagen/liquibase-tools
0.4.1
npm@teselagen/ove
0.7.390.7.40
npm@teselagen/range-utils
0.3.140.3.15
npm@teselagen/react-list
0.8.190.8.20
npm@teselagen/react-table
6.10.196.10.206.10.216.10.22
npm@teselagen/sequence-utils
0.3.330.3.34
npm@teselagen/ui
0.9.90.9.10
npm@thangved/callback-window
1.1.4
npm@things-factory/attachment-base
9.0.429.0.439.0.449.0.459.0.469.0.479.0.489.0.499.0.509.0.519.0.529.0.539.0.549.0.55
npm@things-factory/auth-base
9.0.429.0.439.0.449.0.45
npm@things-factory/email-base
9.0.429.0.439.0.449.0.459.0.469.0.479.0.489.0.499.0.509.0.519.0.529.0.539.0.549.0.559.0.569.0.579.0.589.0.59
npm@things-factory/env
9.0.429.0.439.0.449.0.45
npm@things-factory/integration-base
9.0.429.0.439.0.449.0.45
npm@things-factory/integration-marketplace
9.0.429.0.439.0.449.0.45
npm@things-factory/shell
9.0.429.0.439.0.449.0.45
npm@tnf-dev/api
1.0.8
npm@tnf-dev/core
1.0.8
npm@tnf-dev/js
1.0.8
npm@tnf-dev/mui
1.0.8
npm@tnf-dev/react
1.0.8
npm@ui-ux-gang/devextreme-angular-rpk
24.1.7
npm@yoobic/design-system
6.5.17
npm@yoobic/jpeg-camera-es6
1.0.13
npm@yoobic/yobi
8.7.53
npmairchief
0.3.1
npmairpilot
0.8.8
npmangulartics2
14.1.114.1.2
npmbrowser-webdriver-downloader
3.0.8
npmcapacitor-notificationhandler
0.0.20.0.3
npmcapacitor-plugin-healthapp
0.0.20.0.3
npmcapacitor-plugin-ihealth
1.1.81.1.9
npmcapacitor-plugin-vonage
1.0.21.0.3
npmcapacitorandroidpermissions
0.0.40.0.5
npmconfig-cordova
0.8.5
npmcordova-plugin-voxeet2
1.0.24
npmcordova-voxeet
1.0.32
npmcreate-hest-app
0.1.9
npmdb-evo
1.1.41.1.5
npmdevextreme-angular-rpk
21.2.8
npmdevextreme-rpk
21.2.8
npmember-browser-services
5.0.25.0.3
npmember-headless-form
1.1.21.1.3
npmember-headless-form-yup
1.0.1
npmember-headless-table
2.1.52.1.6
npmember-url-hash-polyfill
1.0.121.0.13
npmember-velcro
2.2.12.2.2
npmencounter-playground
0.0.20.0.30.0.40.0.5
npmeslint-config-crowdstrike
11.0.211.0.3
npmeslint-config-crowdstrike-node
4.0.34.0.4
npmeslint-config-teselagen
6.1.76.1.8
npmglobalize-rpk
1.7.4
npmgraphql-sequelize-teselagen
5.3.85.3.9
npmhtml-to-base64-image
1.0.2
npmjson-rules-engine-simplified
0.2.10.2.30.2.4
npmjumpgate
0.0.2
npmkoa2-swagger-ui
5.11.15.11.2
npmmcfly-semantic-release
1.3.1
npmmcp-knowledge-base
0.0.2
npmmcp-knowledge-graph
1.2.1
npmmobioffice-cli
1.0.3
npmmonorepo-next
13.0.113.0.2
npmmstate-angular
0.4.4
npmmstate-cli
0.4.7
npmmstate-dev-react
1.1.1
npmmstate-react
1.6.5
npmng2-file-upload
7.0.27.0.38.0.18.0.28.0.39.0.1
npmngx-bootstrap
18.1.419.0.319.0.420.0.320.0.420.0.520.0.6
npmngx-color
10.0.110.0.2
npmngx-toastr
19.0.119.0.2
npmngx-trend
8.0.1
npmngx-ws
1.1.51.1.6
npmoradm-to-gql
35.0.1435.0.15
npmoradm-to-sqlz
1.1.21.1.4
npmove-auto-annotate
0.0.90.0.10
npmpm2-gelf-json
1.0.41.0.5
npmprintjs-rpk
1.6.1
npmreact-complaint-image
0.0.320.0.340.0.35
npmreact-jsonschema-form-conditionals
0.3.180.3.200.3.21
npmreact-jsonschema-form-extras
1.0.31.0.4
npmreact-jsonschema-rxnt-extras
0.4.80.4.9
npmremark-preset-lint-crowdstrike
4.0.14.0.2
npmrxnt-authentication
0.0.30.0.40.0.50.0.6
npmrxnt-healthchecks-nestjs
1.0.21.0.31.0.41.0.5
npmrxnt-kue
1.0.41.0.51.0.61.0.7
npmswc-plugin-component-annotate
1.9.11.9.2
npmtbssnch
1.0.2
npmteselagen-interval-tree
1.1.2
npmtg-client-query-builder
2.14.42.14.5
npmtg-redbird
1.3.11.3.2
npmtg-seq-gen
1.0.91.0.10
npmthangved-react-grid
1.0.3
npmts-gaussian
3.0.53.0.6
npmts-imports
1.0.11.0.2
npmtvi-cli
0.1.5
npmve-bamreader
0.2.60.2.7
npmve-editor
1.0.11.0.2
npmverror-extra
6.0.1
npmvoip-callkit
1.0.21.0.3
npmwdio-web-reporter
0.1.3
npmyargs-help-output
5.0.3
npmyoo-styles
6.0.326
npm-2025-09-shai-hulud-originalSource advisory

Sources cited per card. We only list package versions named by the original advisory; we don't infer compromises. Missing something? Send it in.